A teacher prints twelve graphs for a Friday meeting. Student names are in the titles. One copy is left on the copier. By Monday it has been seen by half a dozen people who have no reason to know whose graph it is.
Privacy rules rarely feel urgent until a sheet goes missing. This guide covers what the federal rules require, how they apply to the data you collect, and habits that make a mistake less costly.
What the IDEA rules require
Section 300.623 sets four safeguards. Each agency must protect the confidentiality of personally identifiable information at the collection, storage, disclosure, and destruction stages. One official at each agency must take responsibility for it. All persons collecting or using the information must receive training or instruction on the state's policies and on FERPA's rules in 34 CFR part 99. And each agency must keep, available for public inspection, a current listing of the names and positions of the employees who may have access.
The word "collection" is the one that matters to a teacher with a clipboard. Your data sheet is where the information is collected. The duty to protect it starts there.
What counts as an education record
FERPA's definition of education records, in 34 CFR 99.3, leaves out records kept in the sole possession of the maker, used only as a personal memory aid, and not accessible or revealed to any person except a temporary substitute for the maker.
Read that sentence slowly. All three conditions have to hold. If you share a sheet with a colleague, a paraprofessional, or an IEP team, it no longer stays in your sole possession. So treat anything you share as a record that is covered, and anything you keep truly private as a personal memory aid only if your district agrees.
Parents' right to see records
Section 300.613 says each participating agency must permit parents to inspect and review education records relating to their children that are collected, maintained, or used under the IDEA. The agency must comply without unnecessary delay and before any meeting regarding an IEP, and in no case more than 45 days after the request.
The practical lesson: write data sheets neatly and factually. Dates, times, counts, the definition. Leave opinions and guesses off the sheet. If a parent asks to see it before a meeting, you should be able to hand it over without alarm.
Destruction and retention
Section 300.624 requires the agency to inform parents when personally identifiable information is no longer needed to provide educational services to the child. Information must be destroyed at a parent's request, but a permanent record may be kept without a time limit. That record can include the student's name, address, and phone number, grades, attendance record, classes attended, grade level completed, and year completed.
Your daily data sheets are not the permanent record. Ask your records officer how long you must keep them, who destroys them, and how. Do not shred the sheets you need for a pending meeting, and do not keep stacks of old ones in a drawer indefinitely.
| Rule | What it means for your sheet |
|---|---|
| 300.623, collection | Protect it from the moment you write on it |
| 300.623, storage | Locked cabinet, approved drive, no loose copies |
| 300.623, disclosure | Share only with those who need it, and by approved means |
| 300.623, destruction | Dispose of it as your district directs |
| 300.623, training | Complete your district's privacy training |
| 300.613 | Write as if a parent will read it |
| 300.624 | Know the retention schedule |
Habits that make mistakes smaller
These are practice suggestions. Your district's policy comes first.
- Use initials or codes on graphs and sheets that leave your desk. Keep the key in one secure place.
- Name the file with the code, not the name. File names show up in menus and emails.
- Store in district-approved places. A shared drive your district manages, not a personal cloud account or a USB stick.
- Do not send names by personal email. Use your district's secure channel.
- Turn the paper over. On a desk in a classroom, face sheets down, and put them away at the end of the day.
- Do not post graphs on walls with names or codes that others can match to students.
- Check any new tool with your district first. That includes apps, web forms, and online calculators that ask you to enter student information.
- Collect at the source, share at the minimum. The more copies there are, the more there is to lose.
Tools that need no student data
You can avoid the problem for some tasks. A calculator that runs in your browser, with nothing sent or saved, can work from invented or de-identified numbers. The calculators on this site do that: they run in your browser and do not send or store anything. Even so, enter only what you need, and use a code, not a name, if you save a result.
Staff who help
Everyone who handles the sheets needs to know the rules. Section 300.623 requires training for all persons collecting or using the information. That includes paraprofessionals, substitutes, and general education teachers who record data. See paraprofessional data collection for the training routine and data collection in general education classrooms for the one-page plan.
If something goes missing
Tell your building's privacy contact right away. Do not wait to see if it turns up. Your district will have a procedure, and early reports give it more options. A short note with what was lost, when, and where you last saw it is enough to start.
A five-minute privacy check
Once a month, walk your own setup. Do any sheets show full names? Is anything left on a desk, in a car, or at home? Are the digital files in an approved place? Is the key to your codes stored away from the sheets? Have your paraprofessionals and substitutes seen the rules? If any answer is no, fix it that day. It takes less time than the apology after a loss.
Privacy mistakes teachers make
- Names in titles. Use a code.
- Sharing a sheet and calling it personal. Once shared, it is probably a record.
- Leaving printouts at the copier. Take them with you.
- Old files in a personal account. Move them or delete them as your district directs.
- Writing opinions. A parent may read them.
For organizing the paper side, see a sample data binder layout. Terms are in the glossary.
A note on legal advice
State law, district policy, and the facts of a situation decide what applies to you. This guide quotes federal rules and does not interpret them for a case. Ask your district's records officer or counsel about specific questions.