Home‎ > ‎Policies‎ > ‎8000_Operations‎ > ‎

8330.01 Policy_Unauthorized Acquisition of Student Personal Information

The Board of Education is responsible for maintaining records of all students attending schools in this District.
If the District becomes aware of the unauthorized acquisition of "Personal Information" the District shall make
reasonable efforts to notify each affected student, and if a minor, the parents, that their personal information has
been accessed. "Personal Information" includes the individual's social security number, driver's license number,
State identification number, the number of financial accounts or access codes, the individual's deoxyribonucleic
acid profile, or the individual's unique biometric data including fingerprint, voice print, retina or iris image, or any
other unique physical representation.
The notice shall be issued within a reasonable time, not to exceed forty-five (45) days after the District learns of the
acquisition of the personal information. The notice shall indicate that the District knows of the unauthorized
acquisition of personal information pertaining to the student. The notice shall be by mail or by a method the District
has previously employed to communicate with the students.
If, as the result of a single incident, the District is required to notify 1,000 or more students, the District shall
without unreasonable delay notify all consumer reporting agencies that compile and maintain files on consumers
on a nationwide basis of the timing, distribution, and content of the notices sent to the students.
Upon written request from the student who has received a notice, the District shall identify the personal information
that was acquired.
A law enforcement agency may, in order to protect an investigation or homeland security, ask the District not to
provide a notice for any period of time and the District's notification process shall begin at the end of that time
895.507 Wis. Stats.
Approved/Adopted:  July 13, 2009