Data Privacy Inventory

New York State Education Law Section 2-d requires that all school districts introduce an inventory of programs used in the school environment on their websites and make such a document publicly available. Schools must also provide a clear description of the various data elements collected by the programs and applications including student, teacher and administrator Personally Identifiable Information (PII). To that end, we are pleased to introduce just such an inventory which is listed below. In addition to the required information, more resources such as legal or regulatory documentation may be added to this public resource further outlining the reasons particular data elements are collected as well as the intended uses. At the bottom of this page, you will find the inventory and a description of the programs currently in use in our schools with links to each company's privacy policies. This public portal will be continuously updated as new security information is received or as new technological applications are integrated into the school environment.

After reviewing this new resource, if you have any questions, please feel free to email

GST BOCES Supplemental Information

District data privacy inventory

Additional Signed Parents' Bill of Rights & Supplemental documentation

Some vendors are currently not included in the inventory of products for various reasons. For the vendors were are working with on contractual agreements but are not listed in the inventory of products listed above, we are posting those vendor's signed Parents' Bill of Rights and supplemental documentation below.


Document Name


CDN Associates, Inc.

Parent's Bill of Rights 2023-24

Click to View

What Is RIC One?

RIC One is a program that consists of 12 Regional Information Centers (RICs) that helps with various services provided to schools. One such service, is the Data Privacy and Security Initiative tool for New York State districts to ensure compliance with Education Law 2-d and Family Educational Rights and Privacy Act (FERPA) requirements. RIC One serves as an intermediary for Districts by hosting the service and by acquiring the required documentation from the vendors. They also work to support educators in implementing technology-rich learning experiences while ensuring that students' privacy is not compromised.