Service Desk SCRIC Portal RIC Anywhere MyApps Go To Assist

Data Security and Privacy

Data Security and Privacy Support Service

Our Data Security and Privacy Support Service assists school districts' development and
ongoing compliance with Part 121 of the Commissioner's Regulations related to Ed Law 2-d. To learn more about the service, please reach out to our service contact!


Policies and Procedures	Staff Training

Parent's Bill of Rights Overview Data Security and Privacy Policy Overview Unauthorized Disclosure Complaint Procedure Overview Incident Reporting & Notification Procedure Overview Draft Policy from NYSED Third Party Contract Flow Chart Cyber Incident Response Recommended Protocol	Annual Employee Training Overview Cyber Security & Privacy Reminders Data Security Practices For Offsite Work Data Privacy & Security Awareness Training - District Administrator Login Page


Personally Identifiable Information (PII)	Contracts/Agreements	Software Inventory

Protection of Personally Identifiable Information (PII) PII - RIC one Data Protection and Planning Guide Third Party Contractors & District Requirements - Compliance Assessment	Third Party Contracts Overview Third Party Contracts & District Requirements BOCES Instructional Technology Contracts - NYSITCC BOCES Distance Learning Contracts - NYSDLCC Model Sample Data Privacy Rider	RIC One Data Privacy Inventory Tool (DPIT) Link Data Privacy Inventory Tool (DPIT) Playbook

	NIST Cybersecurity Framework Overview NIST Framework Core NIST Framework - Requirements for NYS Educational Agencies
NIST Cybersecurity Framework

Information available to help support the districts with implementation include:



RIC One DPS	RIC One DPS COVID Response: Data Protection and Continuity of Learning	Location, Location, Location - Where to Find Ed Law 2-d Resources

The RIC One Data Privacy and Security (DPS) initiative supports district compliance with New York State's Common Core Reform Act, Education Law 2-d and Part 121 Regulations.	As Districts continue to work remotely, the 12 Regional Information Centers have come together to create documents that address questions surrounding Ed Law 2-d and Part 121 of the Commissioner's Regulations during this time.	A presentation created by the SCRIC DSP Team to assist in finding resources located on the RIC One website.

List Serv Request Form (Participating Districts Only)	Suggested Ed Law 2-d Implementation Timeline for Districts
Request up to three (3) administrators to be added to the subscription of our RIC One DPS listserv. You will receive Digital Digests, Digital Blasts and Digital Debriefs. Look to service description for more detail.	As districts begin to implement Education Law 2-d, this resource is intended to provide districts with a suggested implementation timeline.

BT BOCES - SCRIC CONTRACTS

RIC One is comprised of 12 Regional Information Centers in New York State. These RICs work together with the State Education department to develop and provide services to school districts. The RIC One Data Privacy and Security (DPS) initiative supports district compliance with New York State's Common Core Reform Act, Education Law 2-d and Part 121 Regulations. One of the items created to help assist districts was the Data Privacy Inventory Tool or DPIT.

The Data Privacy Inventory Tool compiles a list of district software as required by Education Law §2-d Part 121 Regulations. It provides a means for sharing our parents' bill of rights, supplemental information and compliance with components of the NIST Cybersecurity Framework.

Key Categories of the Data Privacy Inventory Tool
Contract Expiration: How the software product is procured; either BOCES, District, or District - Free
Supporting Documentation: Document links or attachments to signed parent's bill or rights and supplemental information

To view our entire contracts page with supporting documentation, please click on the link below:
BT BOCES Contracts Supplemental Information Report

PLEASE NOTE: All hyperlinks that open a document will open in a new window. If you have trouble opening any document, please contact us. Additionally, any links that leave the South Central Regional Information Center website will open in a new window. We are not responsible for the content or design of any external website.

Data Security and Privacy

Prevent - Protect - Educate

SERVICE CONTACTS

ASHLEEN SPEEN
Phone: 607-427-4423

Email: [email protected]

SCRIC Data Security and Privacy Service Resources

This page houses general resources that are available to all.

For districts participating in the SCRIC DSP service, additional resources can be found by clicking the link below and entering the password shared with you.

CLICK HERE