Education Data Privacy and Security Laws: Best Practices for School Districts

As if this fall weren’t hectic enough, school districts now need to prioritize compliance with a critical new regulation expanding New York state’s Education Law 2D. In effect since October 1, regulation Part 121 places new obligations on districts for managing data privacy and cybersecurity. How can districts understand, analyze and assess their risks; and what do they need to ask both internal stakeholders and third-party vendors? Exploring best practices and new challenges in protecting the most vulnerable group in a district – the students themselves — this episode features Joseph Eckstein, business manager and DPO at Eastern Suffolk BOCES; Edward Trevvett, a partner in our Educational Institutions practice; and Alan Winchester, a partner in our cybersecurity protection and response practice and Chief Development Officer of Caetra.io, our software affiliate for cybersecurity compliance.

Download Episode Transcript