Skip to main content

Determinations of the Chief Privacy Officer

On this page, you will find links to Determinations of the Chief Privacy Officer from December 1, 2021 through current Determinations.

Educational Agency Name

Determination Date

Issue(s)

Link to Determination

Batavia City School District 08/16/2023 Parent complained that a District employee improperly disclosed student PII to the student’s emergency contact who is not the student’s parent or legal guardian. Batavia City SD 08/16/2023 Determination
Bay Shore Union Free School District 07/05/2022

Parent complained that their child’s PII was released by a teacher posting information on an educational website and on Twitter.

Bay Shore UFSD 07/05/22 Determination
Behavioral Strategies and Blue Sea 07/13/2023

Two school districts filed incident reports indicating that a former employee of Behavioral Strategies had inappropriately accessed student data through her Behavioral Strategies account after she left her employment with Behavioral Strategies.

Behavioral Strategies and Blue Sea 07/13/2023 Determination
Bradford Central School District 05/17/2023

Parent complained that a District employee accessed their child’s education record in order to enable a former employee of the district to mail personal correspondence to the parent’s home.

Bradford CSD 05/17/2023 Determination
Brighton Central School District 11/07/2023

Parent complained that they received a child’s 504 plan in the mail, who is not the complainant’s child and that the school district was unresponsive when parent reached out.

Brighton CSD 11/07/2023 Determination
Cairo-Durham Central School District 12/01/2023

Parent complained that although they “opted-out” of posting their children’s pictures, the school district published a picture of the freshman year class which included the parent’s child.

Cairo-Durham CSD 12/01/2023 Determination
Cohoes City School District 12/01/2023 Complainant alleged that The District failed to provide her with access to the Student’s educational and health records and that the District disclosed PII concerning the student to a third-party entity without consent. Cohoes City SD 07/13/2023 Determination
Cold Spring Harbor Central School District 08/04/2023 Parent complained that the Superintendent unnecessarily included irrelevant student PII in an email to the parent which copied all members of the school board. Cold Spring Harbor CSD 08/04/2023 Determination
Croton Harmon Union Free School District 09/10/2024

Eligible student complained that the School District improperly disclosed their Personally Identifiable Information when it posted a graduation photograph of the student submitted by the student’s parent.

Croton Harmon UFSD 9/10/2024 Determination
Croton Harmon Union Free School District 9/12/2024

Parent complained that the School District posted pictures of their child on social media without consent in violation of FERPA and Education Law § 2-d.

Croton Harmon UFSD 9/12/2024 Determination
Dr. Richard Izquierdo Health & Science Charter School 03/28/2023 Complainant alleged that former staff members of the Dr. Richard Izquierdo Health & Science Charter School obtained student Personally Identifiable Information (“PII”) before leaving and used that information to recruit students for their new employer, the Charter High School for Law and Social Justice. Dr. Richard Izquierdo Health & Science Charter School and Charter High School for Law and Social Justice 03/28/2023 Determination
Dryden Central School District 06/26/2024

Parents complained that, in response to a FERPA request for the educational records of their children, the School District inappropriately left their children’s information in an unsecure location causing a breach.

Dryden CSD 06/26/2024 Determination
Elmira City School District 08/24/2023 Parent complained that the District without obtaining permission, provided the cell phone numbers for families whose children had been identified as potential participants in the My Brothers Keeper (MBK) program to the program coordinator. The program coordinator used the phone numbers to create a group text to communicate with the families. Elmira City SD 08/24/2023 Determination
Elmira City School District 02/27/2024 Parent complained that in response to a request for her child’s test scores she received the test scores and other reports of all the students in her child’s class. In another incident, parent complains that the school shared her child’s information with individuals who are not school officials. Elmira City SD 02/27/2024 Determination
Elmira City School District 07/19/2024 Parent complained that the school district improperly disclosed other students’ personally identifiable information to her. Elmira City SD 07/19/2024 Determination
Fairport Central School District 11/30/2021 Complainant alleged that the school district improperly displayed students’ names and pronouns, which might indicate a student’s gender identity, on a school hallway without first obtaining consent. Fairport CSD 11/30/2021 Determination
Grand Island Central School District 03/17/2023

Parent complained, after receiving a text message about their child’s vaccination status, that the Infinite Campus data protection agreement did not comply with Education Law §2-d.

Grand Island CSD 03/17/2023 Determination
Jericho Union Free School District 04/29/2022 Whether a school district, upon learning of an unauthorized disclosure of student personally identifiable information, provided adequate notification of the unauthorized disclosure to the parents of affected students. Jericho UFSD 04/29/2022 Determination
Lackawanna City School District 04/07/2023 Parent complained that reports made via the District’s Dignity for All Students Act (“DASA”) reporting form were accessible to all district students to read. Lackawanna City SD 04/07/2023 Determination
North Shore Central School District 12/01/2021 Complainant alleged that the school district disclosed student and family PII — specifically, names, addresses, and phone numbers—without consent, to the president of the teacher’s union. North Shore CSD 12/01/2021 Determination
Saugerties Central School District 08/16/2023 Parent complained that a District employee inappropriately shared student PII (after school pick-up) with the parent’s former spouse. Saugerties CSD 08/16/2023 Determination
Shenendehowa Central School District 07/28/2022

Parent complained that the school district improperly allowed another parent to view video of an incident that involved 5 students, including complainant’s child.

Shenendehowa CSD 07/28/2022 Determination
Skaneateles Central School District 11/30/2021

Parent complained that the school district failed to provide the Parent with access to student’s education records; the school district disclosed PII to third-party service providers and the school district disclosed student PII, without consent to employees who did not have a reason to know the PII.

Skaneateles CSD 11/30/2021 Determination
Success Academy Charter School - Cobble Hill 04/30/2024

Parent complained that the school improperly disclosed their child’s PII when it posted the child’s name and test scores on a bulletin board located in a hallway of the school.

Success Academy Charter School - Cobble Hill Determination
Success Academy Charter School - Rockaway Park Middle School Determination 12/21/2023

Parent complained that the school improperly disclosed her child’s personally identifiable information when it posted student grade point averages (GPAs) in a manner visible to everyone entering her child’s classroom.

Success Academy Charter School Rockaway Park Middle School 12/21/2023 Determination
Success Academy Charter School - Rockaway Park Middle School 03/08/2024

At the request of Success Academy, the Privacy Office reviewed its December 21, 2023 determination and issued a revised determination addressing the educational agency’s parent consent form.

Success Academy Charter School - Rockaway Park Middle School Revised Determination 03/08/2024
Williamson Central School District 07/13/2022

Parent complained that their child’s PII was implicitly disclosed when select students were rewarded with ice cream for exhibiting growth in a reading assessment and other students were not.

Williamson CSD 07/13/2022 Determination
Wappingers Central School District 12/13/2023

Parent complained that the school district improperly disclosed her child’s personally identifiable information when the transportation department was notified that the student did not need to be picked up for several days because the student was suspended due to a disciplinary matter.

Wappingers CSD 12/13/2023 Determination