Complaints of Breaches or Unauthorized Releases of PII

If a parent/guardian, student, teacher, principal or other BOCES employee believes or has evidence that student or teacher/principal PII has been breached or released without authorization, they must submit this complaint in writing to the BOCES. Complaints may be received by the Data Protection Officer or District Superintendent, but may also be received by any BOCES employee, who must immediately notify the Data Protection Officer. This complaint process will be communicated to parents, eligible students, teachers, principals, and other BOCES employees.

The BOCES will acknowledge receipt of complaints promptly, commence an investigation, and take the necessary precautions to protect personally identifiable information.

Following its investigation of the complaint, the BOCES will provide the individual who filed a complaint with its findings within a reasonable period of time. This period of time will be no more than 60 calendar days from the receipt of the complaint.

If the BOCES requires additional time, or if the response may compromise security or impede a law enforcement investigation, the BOCES will provide the individual who filed a complaint with a written explanation that includes the approximate date when the BOCES will respond to the complaint.

The BOCES will maintain a record of all complaints of breaches or unauthorized releases of student data and their disposition in accordance with applicable data retention policies, including the Records Retention and Disposition Schedule ED-1.