Update 3/10/16: Utah’s legislative session has passed, but HB 358, the student privacy bill, has not been funded. And so we are stuck, at least for another year, without proper protections for our children. (If you don’t know why that’s bad, begin by reading a recent article in the Atlanta Journal Constitution, by Jane Robbins, on why Georgia is considering a student privacy bill):
Robbins explains, “…parents have heard glowing claims that ‘digital’ or ‘personalized’ learning will transform education, but they may not understand exactly what this means…[I]nteractive programs, marketed by private ventors, frequently use sophisticated software that collects massive amounts of highly personal information about the student’s behaviors, mindsets and attitudes”. She mentions the fact that the U.S. Department of Education is gung-ho on slurping up that personal, psychological information about beliefs and attitudes, as evidenced in its own published draft reports. (Must-reads!) Robbins makes the real point when she writes, “The issue here goes far beyond data security. It is whether the government and private companies have any right to collect this highly sensitive data in the first place.”
Not passing/funding the Utah HB 358 privacy bill, while passing and funding HB 277, the digital education bill, was crazy. It was the worst mistake of this entire legislative year.
Does the legislature not know that data is the new gold rush, and that education vendors are behaving as if this is the old wild west, without solid laws to govern student data sharing and partnering and selling? Does the legislature not know that to the federal government, also, data is the new gold rush as well, and that our own Congressman Jason Chaffetz held recent hearings against the Department of Education for its data insecure practices– and gave the Dept. an “F”?
Think of it this way: legislators just barely bought the children and teachers of Utah the trendiest, shiniest $15 million vehicle (HB 277) while saying, “We are unable –or unwilling — to pay for seat belts and air bags” –though the safety features would have cost a tiny, tiny fraction (one-sixteenth) of what the vehicle cost.
Where are their brains?
That digital vehicle, HB277 is worthless, at least to this mom, without the seat belts for the kids. I, for one, will not allow my own children to get into that wild, glittering ride.
If it does not pass (and get funded) tomorrow, the Utah legislature is silently informing us that privacy protections for children’s data do not really matter, and that citizens should not have rights to personal ownership over their personal data.
Even though HB 358 is scheduled for a hearing today at the Capitol: Tuesday, March 8th, at 5:00 p.m., the bill is in trouble because the executive appropriations committee did not fund it. That’s almost the same thing as killing the bill. (The appropriations committee needs to hear from MANY of us, as fast as possible. See below for contact information.)
I have been head-bangingly furious about the lack of proper privacy protections for my children since 2012, when I found out that there was such a thing as a State Longitudinal Database System (SLDS)– here and in every other state–and when I then asked to opt out of SLDS tracking, I just received the State School Board’s official “no” letter.
In America, land of the free! In Utah, land of family-friendly liberty. Here, I was told that I was not allowed to opt my child out of SLDS, so that being tagged, tracked, and longitudinally stalked, from day one in school until my child was a working adult and beyond, was a mandate.
I also found out that:
1- Although it starts with the word “State,” the SLDS is federally paid-for and is aligned to federal data standardsand is federally interoperable;
2. Those who house Utah’s SLDS have zero legislative oversight. Incredibly, when SLDS began in 2009, there was zero vote-taking; SLDS came because of a grant application filled out by a clerk at the state office of education simply asking for a federal SLDS grant, and then it was implemented without voter approval. Yet SLDS is 100% applied to all school children, non-consensually.
4. FERPA (federal privacy law) was altered in 2009 by the Department of Education to become almost meaningless. Despite a huge law suit, FERPA stayed in its altered, privacy-harming state. So: in-state or beyond, proper privacy protections do not exist. (For more on that, see the recent hearings of Rep. Jason Chaffetz against the U.S. Dept. of Education)
5. SLDS interfaces with many other state agencies in the Utah Data Alliance, so there is no guarantee that a student’s private data, collected by a school, won’t end up in the data silo of another agency totally unrelated to education. SLDS has the ability, if state policy allows, to also interface with federal agencies’ data, other states’ and even other nations’ data collections.
This situation has literally kept me up at night, many nights, including tonight.
Along with countless other moms and dads, lawyers, think tanks, and legislators, I’ve done a lot of research and writing and speaking and pleading on this subject. See some of what I learned and shared in the past four years, here or here or here or here or here or here or here or here.
I tell you all this in case you are new to this issue so that you’ll understand how INCREDIBLY important passing HB 358 is.
House Bill 358 ought to be treated as one of the very most, if not the most, important bill at the Capitol this year. But the legislature is saying that there isn’t enough money to pass the privacy bill, which has an implementation price tag of $800,000. Oddly, the legislature has agreed to fund the FIFTEEN MILLION DOLLAR technology grant program, HB 277, but that technology bill is meaningless without privacy protections for students’ data.
Is the “no funding for HB 358” decision truly a budgeting pinch decision, or is it a matter of the legislators not caring enough about the rights of students to have privacy?
Here are a few of the lines in the bill that I really appreciate:
Line 463 says: “A student owns the student’s personally identifiable student data”.
Lines 494-503 say that schools have to give disclosure statements to parents, promising not to share certain types of data with out a data authorization.
Lines 775-792 prohibit psychiatric or psychological tests or analysis without prior written consent of parents, and specifically protect data collection about sexual orientation and behavior, mental problems, religious beliefs, self-incriminating behavior, appraisals of individuals with whom the student has a close family relationship; income, etc, and that written consent is required in all grades, kindergarten through 12th.
The bill designates three different types of data that schools may collect: necessary, optional, and prohibited.
Even though the “necessary” list seems too long, at least it limits data collection. It will collect data “required by state statute or federal law to conduct the regular activities of an education entity” such as name, date of birth, sex, parent contact information, student i.d., test results or exceptions from taking tests, transcript information, immunization record or exception from an immunization record, drop out data, race, etc.
Line 346-351 The “optional” list includes IEP information, biometric information, and information that is required for a student to participate in federal data gathering programs.
Lines 356 – 376 The bill also defines “personally identifiable student data” as data that cannot be legally disaggregated (identified by a particular student) (See lines 224-227 for disaggregation language):
356 (i) a student’s first and last name;
357 (ii) the name of a student’s family member;
358 (iii) a student’s or a student’s family’s home or physical address;
359 (iv) a student’s email address or online contact information;
360 (v) a student’s telephone number;
361 (vi) a student’s social security number;
362 (vii) a student’s biometric identifier;
363 (viii) a student’s health or disability data;
364 (ix) a student’s education entity student identification number;
365 (x) a student’s social media login or alias;
366 (xi) a student’s persistent identifier, if the identifier is associated with personally
367 identifiable student data, including:
368 (A) a customer number held in a cookie; or
369 (B) a processor serial number;
370 (xii) a combination of a student’s last name or photograph with other information that 371 together permits a person to contact the student online;
372 (xiii) information about a student or a student’s family that a person collects online and
373 combines with other personally identifiable student data to identify the student; and
374 (xiv) other information that, alone or in combination, is linked or linkable to a specific
375 student that would allow a reasonable person in the school community, who does not have
376 first-hand knowledge of the student, to identify the student with reasonable certainty.
We need to protect our kids! This bill NEEDS to pass!
If you’ve ever read 1984 and remember Big Brother; if good old-fashioned history books have taught you that tyranny has been far more dominant than liberty throughout world history (with the exception of a freedom experienced in the U.S. under the Constitution for a few 200+ years) –or if you’ve been paying attention to the recent struggle between big-data and individual rights– then you know: allowing any person or government –unfettered– to track individuals without their consent, for virtually the duration of their entire lives, is a very bad idea.
We need as many emails and phone calls or texts as we can muster before 5:00 p.m. tomorrow, Tuesday, March 8, to the following representatives, and especially to Speaker of the House Greg Hughes and President Niederhauser:
Senator (President) Niederhauser wniederhauser@le.utah.gov
Senator Sanpei dsanpei@le.utah.gov
Senator Hillyard lhillyard@le.utah.gov
Senator Dunnigan jdunnigan@le.utah.gov
Senator Adams jsadams@le.utah.gov
Representative Gibson fgibson@le.utah.gov
Senator Okerlund rokerlund@le.utah.gov
Here they are, ready to cut and paste into your email: dsanpei@le.utah.gov lhillyard@le.utah.gov jdunnigan@le.utah.gov jsadams@le.utah.gov fgibson@le.utah.gov rokerlund@le.utah.gov greghughes@le.utah.gov wniederhauser@le.utah.gov
He was right when he said that it’s educational malpractice to use a beta-test to judge students and teachers and schools.
He was right in saying that it’s unethical to test students in January and February on content that hasn’t even been introduced for that school year yet.
But why was there no mention of privacy –or of parental rights to informed consent? Why is that not part of his stop-SAGE argument? Why is the senator pushing back against SAGE/Common Core tests now, when he never has done so before? He could have helped pass Rep. Anderegg’s student data privacy bill, two years in a row. He could have done so much to protect our children. He did not. The student data privacy bill is, once again, two years in a row, utterly dead in the water.
I do suspect, because of Stephenson’s infatuation with all things technological, that Stephenson is using the anti-SAGE argument to lead listeners toward acceptance of something just as sinister or worse: curriculum-integrated tests, also known as “stealth assessments”.
That’s what’s coming next. And stealth will hurt, not help, the fight for parental rights and student privacy rights.
A resolution just passed the Utah House of Representatives along these stealth assessment lines, called HCR7. The visible intentions of HCR7 are great: to reduce the amount of time wasted on testing and reducing test anxiety; to expand the amount of time spent teaching and learning instead of test-prepping. Its sponsor, Rep. Poulson, explained in a KSL quote: “my family were small farmers and cattlemen, and I know just from that experience that if you spend all of your time weighing and measuring, and not feeding, it causes problems.”
Agreed! Education for a child’s benefit should be its own end, not just a stepping stone toward the Capital T Tests.
But, but, but.
See line 66. It wants to “maximize the integration of testing into an aligned curriculum“. How?
The school system just hides the factthat a test is happening from its students.
The techno-curriculum can suck out a constant stream of personal data from the student’s technology use. Assignments, projects, and even games can constantly upload academic and nonacademic data about the child, all day every day, into the State Longitudinal Database Systems —and into the hands of third-party technology vendors.
As Dr. Thompson has pointed out, stealth can be honorable and valuable in a private, parentally consented-to, setting: when a parent asks a trained child psychologist to help heal a hurt child, he/she can analyze a child’s drawings, how a child plays with toys, or how he organizes objects, etc.
The difference is informed consent.
The governmental-corporate machine is suggesting that legislatures force schools to adopt compulsory testing embedded in school curriculum and activities, allowing student data collection to be pulled without informed consent.
Do we want our students to be tested and analyzed and tracked like guinea pigs all day, year after year— not by teachers, but by third party vendors and the government?
Stealth testing, or “integrated testing” removes the possibility for parental opt-outs. I’m not for that. Are you?
Why doesn’t anyone seem to care? I repeat: two years in a row Rep. Jake Anderegg’s student data protection bill has gone unpassed. I cannot understand the legislature’s apathy about privacy rights and the lack of valiant protection of children’s privacy in this data-binging day and age.
I don’t get it. Someone, tell me why this is not important in a supposedly child-friendly state. It is known all over the planet that private data is the new gold, the new oil. Knowledge about individuals is power over them. When someone knows extremely detailed information about individuals, they can can persuade them, influence them, guide them, help them –and control them. Children’s privacy, their data, is gold to corporations and governments. Yet they are notbeing protected. Our legislators don’t think it’s important enough. We can pass bills about every petty thing you can imagine, but we can’t protect our kids from having their gold robbed every single day. I can’t believe it’s just neglect and busy-ness. I think it’s greed-based.
Don’t believe it? Study what the feds have done in recent years to destroy student privacy. Search Utah code for any mention of students having rights to their own data, or ownership of it; search in vain for any punishment when data is collected without parental consent by schools or third party vendors. See corporations salivating over taken student data –collected without parental consent by every state’s “State Longitudinal Database System”.
Watch the Datapalooza event where the same type of talk is going on– absolutely no discussion of parental rights, of privacy rights, of the morality of picking up academic and nonacademic personal information about another person without his/her consent nor parental consent: https://youtu.be/Lr7Z7ysDluQ
Our elected representatives, from Governor Herbert through Howard Stephenson through Marie Poulson through our state school board, are not demonstrating any respect for parental consent. By their inaction, they are violating our children’s data privacy.
Utah is volunteering to give away our gold, our children’s private data– out of naiivete, greed, or tragically misplaced “trust”.
There is only one solution that I can see: parents, we are the only ones who really care. WE CAN SPEAK UP.
We can protect our children by pressuring our elected representatives at the senate, house and state school board. We can tell elected representatives that our children need and deserve proper data privacy protection. Tell them that FERPA is broken and we need local protection. Tell them we will not tolerate embedded tests in the daily curriculum and technologies that our children use.
Demand the dignity of privacy for your child. Say NO to “integrated curriculum and testing”– stealth assessment. Put these words in your elected representatives’ inboxes and messaging systems and twitter feeds and ears. Don’t let it rest. Be a pest. Silence is acquiescence.
Children and their private data are not “stakeholder” owned inventory. Children are not “human capital” to be tracked and directed by the government. My child is mine. He/she has a mission unrelated to fattening up the workforce or serving Prosperity 2020. I do not think the legislature comprehends that fact.
Maybe I am not barking loudly enough. Maybe a hundred thousand parents need to be barking.
I’ll repaste the elected representatives’ email information here.
———————————————————————–
Write to the Utah State School Board: Board@schools.utah.gov
COMMON CORE 