Privacy Policy

Your privacy is very important to us. Accordingly, we have developed this policy to help you understand how we collect, use, communicate, disclose, and safeguard personal information. The following outlines our privacy practices:

• Purpose Identification: Before or at the time of collecting personal information, we will identify the purposes for which the information is being collected.​
• Consent and Use: We will collect and use personal information solely with the objective of fulfilling those specified purposes and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.​
• Data Retention: We will only retain personal information as long as necessary for the fulfillment of those purposes.​
• Lawful Collection: We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.​
• Data Relevance: Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.​
• Security Safeguards: We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification.​
• Policy Transparency: We will make readily available to individuals information about our policies and practices relating to the management of personal information.​

We are committed to conducting our business in accordance with these principles to ensure that the confidentiality of personal information is protected and maintained.​

Student Data Collection

The Cache County School District (CCSD) recognizes its responsibility to protect student privacy and ensure data security. In compliance with Utah’s Student Data Protection Act (SDPA), U.C.A §53E-9-302, CCSD has adopted a Data Governance Plan.

Student Data Collected

Class 1 Data is personally identifiable information (PII) or confidential information that is collected or assigned to students or staff members. This information includes: 

1. A student or employee ID
2. A place and/or date of birth
3. Personal address and phone numbers
4. Personal email addresses
5. Social Security Number
6. Medical records
7. Bank account information 
8. Staff or student evaluations 
9. Private education records such as ESL, 504 or Special Education records.
10. System access passwords or file encryption keys 

Class 2 Data is private business or educational data that is part of the day to day operations of the school district. This information includes but is not limited to:

1. Business records such as contracts, bids, purchase requisitions, purchase orders, invoices, account numbers, budgets, job postings, interview documents, internal policies and procedures, etc.
2. Educational records such as attendance rolls, class rosters, student assignments, grades, quizzes, tests, etc.
3. Staff or student email or documents stored in student or staff accounts or on student or staff computers.

Class 3 Data is Student Directory Information. This information includes: 

1. Student first and last name
2. Student home address
3. Student phone number
4. Student ID number
5. Student photograph
6. Student dates of attendance (years)
7. Student grade level
8. Student diplomas, honors, awards received
9. Student participation in school activities or school sports
10. Student weight and height for members of school athletic teams
11. Student most recent school attended

Optional student data may include information related to Individual Education Plans or special needs services, for which the district will obtain written consent from parents prior to collection. ​

Use of Student Data

CCSD uses collected student data to inform educational decisions and improve student outcomes. The district maintains a metadata dictionary that outlines data elements collected and their usage.

Sharing of Student Data

CCSD does not share a student’s personally identifiable information (PII) unless in accordance with the Family Educational Rights and Privacy Act (FERPA) and the Utah Student Data Protection Act. De-identified or aggregate data that cannot be used to identify a particular student may be released without consent. ​

Protecting Student Data

CCSD maintains an Information Technology Security Plan that is updated at least annually. This program includes security training, risk assessments, security testing, and audits. District systems are regularly updated to prevent unauthorized access. Policies are in place to secure all media containing sensitive or confidential data. In the event of a significant data breach involving PII, the district will notify affected individuals as required by law.

Parental Rights Under FERPA

Parents and eligible students have the right to inspect and review the student's education records within 45 days of a request. They may also request amendments to records they believe are inaccurate or misleading. CCSD has policies in place to protect student privacy as required by both state and federal law.

Notice of Directory Information

CCSD may disclose appropriately designated "directory information" without written parental consent, unless the parent has advised the district to the contrary. The primary purpose of directory information is to allow the district to include this type of information in certain school publications. If parents do not wish this information to be made public, they must notify the district.

For more detailed information, please refer to CCSD's Data Governance Plan and related policies available on our website.