PLEASE READ THE FOLLOWING CAREFULLY
Personally Identifiable, De-Identified & Aggregate Information
PII is information that can be directly utilized to identify a specific individual, or linked data elements that when combined may be used to indirectly identify a specific individual. We consider the following to be examples of PII: a student’s first and last name, email address, home address, phone number, social security number and certain other information to the extent they are linked and/or coupled with PII. De-identified information is information that does not identify a specific individual and cannot reasonably be used to identify a specific individual either alone or in combination with other de-identified data. Aggregate information is data combined into de-identified groups. While we utilize these definitions for your convenience, we comply with the standardized definitions as provided in FERPA.
All data remains the property of and is solely owned, and thereby controlled, by you. You grant PowerSchool a non-exclusive, royalty free license, to use equipment, software, your data or other material of yours solely for the purpose of providing, maintaining, and supporting you and other licensees with PowerSchool Products and Services. However, PowerSchool may use and distribute the data for any lawful purpose outside the scope of the Agreement, provided always that such Data must be de-identified. Upon termination of your contract with PowerSchool, all of your data is either returned to you (i.e., you have requested that PowerSchool store and/or host your data) or destroyed.
An example of PowerSchool’s lawful use of said data would include when you contract with PowerSchool to provide customization of PowerSchool Products. PowerSchool will use your data to ensure the customizations are properly implemented and/or compatible with your student information system, which ensures you experience limited, if any, downtime.
What Information Is Collected
PowerSchool, in its role as a vendor to educational agencies and institutions, both public and private entities (“Educational Agencies”), receives disclosures from the Educational Agencies, which include the PII contained in student records. Only information that is needed for PowerSchool to perform services, which are outsourced to PowerSchool by the Educational Agencies, is disclosed to PowerSchool. These disclosures are authorized by FERPA.
Information Sharing, Disclosure & Retention
Information collected through PowerSchool Products may be supplied to affiliates of PowerSchool, and other companies and organizations who perform work for us under contract or sell products or services that complement our products and services. Information is only supplied to other companies and organizations at your request (i.e., you purchase a third-party supplemental product to augment PowerSchool). Upon completion of the terms of the contract (i.e., termination by you or PowerSchool), PowerSchool destroys any copy of your data that PowerSchool had in its possession at the time of termination. This will also terminate access through PowerSchool for all authorized companies and organizations as well.
In the highly unlikely event that there is an unauthorized disclosure of PII data relating to a student, notwithstanding the above exceptions, PowerSchool will promptly inform you of the following information, if reasonably available to PowerSchool: (1) what information was disclosed; (2) the student(s) affected by the disclosure; and (3) PowerSchool’s course of action to mitigate any further disclosure.
Access & Correcting Erroneous Data
Under FERPA, a school must provide a parent with an opportunity to inspect and review his or her child’s education records within 45 days following its receipt of a request. A school is required to provide a parent with copies of education records, or make other arrangements, if a failure to do so would effectively prevent the parent from obtaining access to the records.
To ensure data security, PowerSchool provides limited ability to amend data through the use of select PowerSchool Products (e.g., PowerSchool Registration). Within your sole discretion, you can allow parents, legal guardians, and eligible students, who are over eighteen years of age, to view and/or download student’s data through the PowerSchool Products that support this capability. In the event there is any erroneous data contained in the student record, PowerSchool advises parents, legal guardians, and eligible students to contact you to update the erroneous data.
Data Privacy Enforcement
When you purchase PowerSchool Products, PowerSchool provides you with PowerSchool’s suggested best practice guidelines. For example, PowerSchool makes recommendations pertaining to creating unique and/or complex passwords that enhance the security of your accounts. These guidelines are formulated in an attempt to ensure PowerSchool Products are utilized in a manner consistent with FERPA and other potentially applicable state and federal laws. In the event that you determine PowerSchool’s best practice guidelines are not suitable for your customized use of PowerSchool Products, you shall ensure that the alternative practices utilized are of equal or better standards in order to protect your data, as required by law.
PowerSchool trains its employees that access and/or provide support for your data to adhere to strict data access and destruction policies. Moreover, even when providing support for select PowerSchool Products, you have the exclusive control in granting PowerSchool employees access. PowerSchool will never attempt to circumvent your control in this regard.
This subsection is only applicable to customers that have contracted with PowerSchool and primarily reside in the European Union. PowerSchool participates in the EU-U.S. Privacy Shield framework, and therefore adheres to the Privacy Shield Principles. In the event of an unauthorized transfer of EU students’ PII, which PowerSchool received pursuant to the EU-U.S. Privacy Shield, PowerSchool may be potentially liable. For more information on the Privacy Shield framework, including the Privacy Shield Principles, please visit the Privacy Shield website (https://www.privacyshield.gov/).
We encourage you to contact us at EULegal@powerschool.com should you have a Privacy Shield-related question, concern, and/or complaint. For any complaints that cannot be resolved with PowerSchool directly, PowerSchool has chosen to cooperate with JAMS as its independent recourse mechanism that is available to investigate unresolved complaints regarding PowerSchool’s compliance with the Privacy Shield. Please visit the JAMS’ Privacy Shield website (https://www.jamsadr.com/eu-us-privacy-shield) for more information. As further explained in the Privacy Shield Principles, a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. PowerSchool is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
Incorporations by State
Florida – PowerSchool will provide notification of a security breach pursuant to requirements as mandated in the Florida Information Protection Act of 2014.
Maryland – PowerSchool will not use Covered Information to engage in targeted advertising.
New York – In accordance with New York Education Law § 2-d, PowerSchool will comply with and attach to your contract the Parents’ Bill of Rights for Data Privacy and Security, as applicable.
Pennsylvania – PowerSchool will provide notification of a security breach pursuant to the requirements of Pennsylvania’s Breach of Personal Information Notification Act.