What is Ed Law 2d?
In early 2020, The New York State Department of Education adopted a new law focused on the privacy and security of student and staff personally identifiable information (PII). The Educational Law Section 2d, known amongst NY schools as Ed Law 2d, provides “guidance to educational agencies and their third-party contractors on ways to strengthen data privacy and security to protect student data and annual professional performance review data.”
NY Ed Law 2d Security Requirements
In order to strengthen data security and privacy, the New York State Education Department (NYSED), now requires the following of all educational agencies:
- Appoint a Data Protection Officer with appropriate knowledge, training, and experience to oversee data security and privacy.
- Develop and implement a Data Security and Privacy Policy.
- Conduct security training for educational agency employees.
- Publish a Parent’s Bill of Rights and include it in every contract with a third-party contractor that receives PII.
- Mandate that all third-party contractors submit a Data Security and Privacy
- Plan for each contract to demonstrate how they will protect PII.
- Adopt the NIST Cybersecurity Framework as the standard for data privacy and security and meet the requirements to ensure they are adequately protecting PII.