Data-obsession: Who protects the students?

Public school P.E. programs are incorporating technology to monitor students weight and physical activity habits. According to a recent piece of investigative reporting in the Revered Review, a specific technology from Polar Fitness"is used in more than 10,000 K-12 physical education programs across the United States." The report reviewed the way the technology is being used in a number of states and school districts.

Some of this technology may be beneficial to students and parents may agree with their student's participation. However, little has been published on the cost benefits for parents, community members, or taxpayers to evaluate. In the current data-gathering obsessed environment, the use of this technology has raised concerns regarding:

• Parent consent


• Privacy and security

Use of monitors intrusive

Donna Lieberman, the executive director of the New York Civil Liberties Union, the New York affiliate of the ACLU, sent The Revered Review the following statement: “The question here is whether these monitoring programs are voluntary or not. It’s one thing for children to participate voluntarily with their parents’ consent. But if they’re being compelled or shamed into participating, then it’s extremely problematic.”

Lieberman continued: “Monitoring children’s vital signs is very intrusive, and even a voluntary program must have clear privacy safeguards, including limits on how long the data can be stored and who has access to it.”

Security and privacy

Emmett McGroarty, the executive director of the Preserve Innocence Initiative of the American Principles Project, said if schools are using the monitors, there should be full disclosure to the parents. If they are used beyond the school day, it could be “highly dangerous” as it could be an “infringement on parental rights.”

Full disclosure by parents, and the ability to “opt in” rather than “opt out” should be allowed, McGroarty said. “I really would urge the taxpayers to get a closer look at what’s going on, and who is funding this.”

The company issued a press release on January 19, in regards to its Polar Activity monitor: “The activity data is stored on the polargofit.com web service. All information is securely stored and the data is available only to authorized users with a password.”

A company press release does not quite cut the mustard. The school districts need to ensure that parents and students have clarity. That is not too much to ask.


Read the full article for more information.

Blackboard LEARN security vulnerabilities

Sandra is back after a three week blogging hiatus.

The Australian edition of SC Magazine, which focuses on IT security, reported that Blackboard Learn had serious vulnerabilities. The report revealed that "security vulnerabilities have been found in the world’s most popular educational software - holes that allow students to change grades and download unpublished exams, whilst allowing criminals to steal personal information." Initial concerns reported to Blackboard by Australian university managers were ignored or dismissed, which led to the publication of an advisory by AusCERT, a non-profit security organization funded by Queensland University. Blackboard then responded with its own advisory.

Blackboard Learn is used widely by U.S. universities and by the U.S. military. Inside Higher Ed also reported on the security concerns:

Matthew Maurer, a spokesman for Blackboard, told Inside Higher Ed via e-mail that the article was correct that there was a security flaw, and that this problem was not unique to Australian universities. But he said that the article (which has been circulating among some American IT officials) had an "exaggerated fashion" in describing the problem. "There's not a single reported case of exposure, just the theoretical," he said. Maurer said that many of the issues were very quickly fixed, and that the company is now providing information to colleges and universities so they can see that there are not serious problems remaining.

Commentary
While there may not have been a single reported case of exposure, there was a significant security flaw. Universities purchasing online learning systems and students paying tuition to access online courses should have assurance that the products do not have this level of security holes to begin with. Security issues affecting other U.S. online education initiatives remain a concern.

Previous postings on this topic:

Student Data Collection: Purpose, Costs, Risks?
Education Reform and Privacy Concerns Collide

NY State DOE cancels deal with News Corp

Grumpy Educators posted the investigation into Rupert Murdoch's entry into the education sector and the deal under investigation with the NY Department of Education.

Follow up on this story is reported in the Huffington Post today. The NY Department of Education has cancelled the $21 million dollar deal with News Corp, using money NY received as part of its Race to the Top grant to obtain services related to the creation of a centralized student database for personal information.

New York "State Controller Thomas DiNapoli "quietly rejected" the contract, citing News Corporation's "incomplete record" for qualifications, the Daily News reports."

Reposting the following clip from last month that is fact-based and easy to understand the Rupert Murdoch/Wireless/NY State deal.

Florida: School Board of Brevard invites parent input on student privacy

The Florida Today newspaper covered the School Board of Brevard's decision to examine parent consent when it comes to access to student information. The Board decided to obtain input from parent-advisory groups before making changes to who can request student directory information in accordance with federal laws. According to the Florida Today reports that "the district does not release certain information -- such as photos or email addresses, or a student's grade level or school name -- that federal guidelines allow."

Student directory information currently includes:

• Student's date and place of birth


• Dates of attendance and graduation


• Participation in recognized sports and activities


• Height and weight of athletic team members


• Degrees, honors and awards

"Typically, military, colleges and research institutions request the information. In addition, it is often released to graduation vendors, such as those handling class rings or senior photos. Non-educational uses of directory information must be approved by the superintendent, District Spokeswoman Christine Davis said."

Read the full article here.

Information on the Family Educational Rights and Privacy Act can be found here.