Newtown Public Schools recognize that, to be productive contributing members of society, it is vital for all students to be able to efficiently and effectively use digital tools. Digital tools empower students in their ability to research, problem solve, create content, communicate, and collaborate as well as support staff in the delivery and re-enforcement of district curriculum.

Newtown Public Schools' practices have always put student safety first. When it comes to the use of digital resources, careful thought is given to the value of the resource, the types of logons to be used and the data collected before it is adopted. The existing laws such as FERPA and COPPA provided a basis for all decision making.

To ensure the consistency in practice, the State of Connecticut passed a new law regarding student data that went into effect on October 1, 2016, Public Act Number 16-189 (PA16-189). The Act requires each school district to establish a Data Privacy Contract with all vendors and consultants that work in our schools and have access to student data. The act also requires these contracts from all external technology resources that have access to and maintain student data. Student data, as defined by this law, includes: student information, student records, and student generated content.

PA16-189 further requires that all districts post a list of all applications, online resources and contractors as a method for notifying parents and students.

In compliance with Connecticut State Law, we have posted a list of digital resources used within the district that house student data. The programs or resources may be in use district-wide, in a very small number of classrooms, or with individual students. The list will be updated each time the district enters into a new contract where student data is housed. To view the list click, please use the link under Resources on the page.

This list will be continually updated as we work through contracts upon their renewal. Please check back frequently to keep informed.

Additionally, You will be able to find information on any breaches here by navigating to the Breach Notification page.

 

Resources:

• FERPA - Family Educational Rights and Privacy Act
• COPPA - Childrens Online Privacy Protection Act
• PA 16-189 - An Act Concerning Student Data Privacy

In February of 2017, the Newtown Public Schools' District Technology Committee (DTC) has established some guidelines and clarifications intended to help staff as they make app and resource selections

Please make note of the following guidelines for staff on app/resource selection and use:

1. Using an account under your own name and allowing students to use it to create projects, is a violation of PA16-189. The provider still has access to student generated content.
2. Using generic logins for your students does not eliminate the need for a contract addendum per the requirements of the Act. A generic logon also builds a profile for a student.
3. Using an app that explicitly states not for use by students under the age of 13 is not permissible in grades K-8. However in the case where an argument can be made that the app/resource meets a unique need that can not be met by another, consideration will be given. In these instances, if approved, the staff member will be required to obtain and maintain a record of parent approval signatures.
4. Using an app/resource that has an age requirement of 18 years or older will be prohibited in all grades.

Thank you for your patience as we have evolved our process to ensure compliance with the Public Act.

Notice of Data Security Incident Regarding Raptor Technologies (1/12/2024)

We want to inform you about a recent data security incident involving Raptor Technologies, the service provider we use for our school visitor management software.

Raptor Technologies discovered a vulnerability in certain cloud-hosted data log file repositories. Raptor informed us it took immediate action to secure the affected data log file repositories and initiated a thorough investigation. 

Raptor informed us that our district’s data within the log files was externally accessible, but there is no indication that any third-party accessed the information, except for the cybersecurity researcher who discovered the vulnerability and Raptor’s personnel. Raptor does not believe there has been any misuse of this information. Although it is unclear whether any of the student information in the impacted log file repositories were compromised or accessed without authorization, we are providing you this notice out of an abundance of caution for the purpose of transparency because those log file repositories were externally exposed until recently secured by Raptor.

Raptor’s investigation showed that the following information may have been included within the data log file repositories at issue: student names, school identification numbers, randomly assigned transaction numbers, and district identification numbers assigned by Raptor. Notably, these logs do not include other demographic information, personally identifiable details, or keys to identification numbers, and Newtown Public Schools is not identified in the data other than through an identifier known only to Raptor personnel. 

We understand the importance of safeguarding student information and want to assure you that we take this matter seriously. At this time, we do not believe there are any actions for you to take with respect to the privacy of personal or student information, but we will notify you if we are informed differently by Raptor.

If you have any questions or concerns, please contact 

Dennis Colclough

Director of Technology | Newtown Public Schools
Email: colcloughd@newtown.k12.ct.us
Tel:203-270-6140

Dear Parents and/or Guardians,

I am writing to inform you of a recent incident that may affect the security of certain student information.  One of our vendors, Illuminate Education, has communicated with us that some of their databases containing potentially protected student information were subject to unauthorized access. Although there is no evidence that any information was subject to misuse, we are notifying you out of an abundance of caution.

I also wanted to make you aware that Illuminate Education will be sending a letter to your home that provides more detailed information regarding their response to the incident, tips for protecting a minor’s information as well as an offer of complementary access to 12 months of identity monitoring service for your child.  The letter will also provide you with a dedicated assistance line to answer any additional questions you may have. 

Dear Parents and/or Guardians,

SchoolDude, a vendor the Buildings & Grounds Department uses for work order requests and tracking routine maintenance of equipment. Has communicated with us that some of their databases were subject to unauthorized access. 

This system is not accessed by students and no student information is stored in their databases.