California Professional Standards for Education Leaders · 5B–5
Protect the rights and appropriate confidentiality of students, staff, and families.
Confidentiality is a daily design responsibility: collect less, grant access carefully, communicate with restraint, and prepare for mistakes before sensitive information is exposed.
What this looks like in practice
Leaders translate law and policy into routines people can follow. That includes identity verification, role-based access, secure sharing, private meeting practices, records retention, disposal, incident reporting, and clear boundaries between educational need and curiosity.
Digital convenience can obscure disclosure. Auto-filled recipients, shared drives, exports, screenshots, recordings, and public dashboards all create copies and audiences. Staff need scenario-based practice, not just an annual acknowledgment form.
Developing the practice
Minimize
Collect, display, and share only the information necessary for the defined educational or operational purpose.
Control the pathway
Verify identity, role, recipient, channel, access duration, storage, and disposal before sensitive information moves.
Prepare to respond
Make reporting easy, preserve evidence, limit further exposure, notify responsible staff, and learn from near misses.
Useful connections
FERPA guidance
Begin with SDLA’s FERPA overview, then confirm local procedure and authoritative guidance for the specific situation.
Student Data Privacy Coordinator
The role profile can help districts clarify ownership for policy, training, review, incidents, and continuous improvement.
Questions for reflection and mentoring
- What sensitive information do we keep because we can, rather than because we still need it?
- Where is convenience most likely to widen access beyond educational need?
- Would staff know what to do in the first hour after an accidental disclosure?