Skip To Main Content

Privacy and Digital Safety

Digital technologies, both hardware and software, play a vital role in supporting student learning, creativity, and access to information. The School District of Haverford Township promotes a culture that provides appropriate access to digital resources, encourages responsible online behavior, and safeguards student data and privacy.

1. Responsible Use and Access

Each student in Haverford is provided with a personal device and grade-appropriate online tools to support learning.

  • Grades K–5: Classroom-based Chromebooks
  • Grades 6–12: Individually assigned Chromebooks

Online learning tools include Google Workspace, ClassLink, and other district-approved educational platforms.

All technology use is governed by district board policies and administrative regulations that outline acceptable use of internet, computers, and network resources, including expectations for responsible use of AI tools. These policies define expectations for students, staff, and other authorized users and support a safe, respectful, and ethical digital environment.

2. Foundational Security Principles

The district follows the data protection principles of Confidentiality, Integrity, and Availability to ensure that information remains secure and accessible only to authorized users.

  • Confidentiality: Access to personal or confidential information is limited to those with a legitimate educational or operational need, following the principle of least privilege.
  • Integrity: Information is maintained accurately and protected from unauthorized modification.
  • Availability: Core systems and data remain accessible to authorized personnel when needed for instruction or district operations.

3. Cybersecurity Practices

3.1 Framework Alignment

The School District of Haverford Township aligns its cybersecurity program with the Center for Internet Security (CIS) Critical Security Controls Framework, which provides a prioritized set of best practices designed to improve cyber-defense capabilities across school systems. All district employees participate in ongoing cybersecurity awareness training to support these controls and protect sensitive information.

3.2 Network and Vulnerability Monitoring

The district conducts continuous network monitoring and participates in periodic external vulnerability assessments through partners such as the Cybersecurity and Infrastructure Security Agency (CISA). Findings and recommendations from these reviews are used to strengthen the district’s digital infrastructure and data protection measures.

The district also evaluates staff cybersecurity awareness and risk behaviors through regular training and simulated phishing exercises conducted in partnership with Proofpoint, supporting a culture of ongoing vigilance and safe online practices.

3.3 Multi-Factor Authentication (MFA)

All district staff use MFA to access systems containing sensitive or financial information, in alignment with cybersecurity insurance and district requirements.

3.4 Internet Filtering and Device Monitoring

All district internet traffic is filtered through Lightspeed, ensuring compliance with the Children’s Internet Protection Act (CIPA) and district policies designed to maintain safe and age-appropriate online environments. Filtering levels are tailored by school level and instructional need—elementary students have access limited to age-appropriate content, while middle and high school students have broader, research-based access. The Technology Department regularly reviews and adjusts filtering categories to maintain compliance with federal guidelines and to support classroom instruction. Exceptions to filtering are approved only through established district procedures.

4. Student Data Privacy

4.1 Commitment to Privacy

The School District of Haverford Township is committed to being a trusted steward of student data. All educational platforms and applications are reviewed to ensure compliance with FERPA, COPPA, 73 P.S. § 2301 et seq., and applicable state and federal privacy laws. Parents and guardians may opt out of sharing certain categories of student information through the district’s COPPA opt-out procedure, available on the district website or upon request.

4.2 Approved Online Resources

Only district-approved digital tools that meet privacy, instructional, and legal standards are used with students. Each resource undergoes a review to confirm compliance with applicable laws and district procedures before adoption.

Additionally, all software contracts and online service agreements are reviewed by the district’s solicitor to ensure compliance with federal and state privacy laws, board policies, and district data-protection standards.

To protect student data:

  • Automated Account Management: Student accounts are securely created and deactivated through ClassLink single sign-on and rostering systems.
  • Data Minimization: Shared data is limited to what is necessary for educational use; when possible, data is de-identified to prevent linking information to individual students.

4.3 Data Breach Notification

In accordance with district procedures for data security and breach notification, the district follows board policy 830 for identifying and notifying individuals of any confirmed data breach involving unencrypted or unredacted personal information.

If a breach occurs:

  • The Superintendent or designee conducts an investigation and determines, with legal counsel, whether notification is required.
  • Affected individuals are notified within seven (7) business days, and the Delaware County District Attorney is notified within three (3) business days, consistent with 73 P.S. § 2304.
  • Notices include contact information, a description of the information involved, and recommended steps individuals can take to protect themselves.
  • Notification may be delayed if law enforcement determines it would impede an active investigation.

These procedures ensure compliance with Pennsylvania’s Breach of Personal Information Notification Act and uphold transparency with families and staff.

4.4 Digital Citizenship Education

Digital citizenship and online safety are integral parts of the K–12 curriculum. Students learn to engage safely, respectfully, and responsibly online while understanding their digital footprint. Technology integration across subjects ensures students develop the skills to use technology ethically and effectively.

5. Continuous Improvement

The School District of Haverford Township regularly reviews and updates its technology, privacy, and cybersecurity practices to ensure continued alignment with board policies, administrative regulations, and evolving legal standards. The district’s commitment is to maintain a secure and responsible digital environment that protects personal information and supports teaching, learning, and community trust.