A Free Quiz Platform and a Parent Complaint
At Riverbend Middle School, a seventh-grade science teacher has been using a free online quiz platform for weekly reviews with 112 students. The platform requires students to create accounts with first and last name, school email, and birth date; it displays ads and stores data on servers the district does not control. A parent emails the principal: her 12-year-old did not sign up voluntarily, the site’s privacy policy says it may share data with “partners,” and she cannot delete the account. The teacher says the platform is optional and highly engaging. The district has no signed data privacy agreement with the vendor and no established review process for free apps. New York Education Law 2-d and its regulations apply. The principal asks you to advise on whether to shut the use down immediately and what to tell the teacher. You have the district’s acceptable use policy, a draft parents’ bill of rights, and two weeks before a faculty meeting.
1. Analyze the compliance issues and recommend an immediate action. Be specific about which obligations are triggered and why “optional” does not resolve them.
Read the worked answer
The immediate action should be to suspend student account creation and use of this platform until the district completes a privacy review. “Optional” does not cure the problem when the teacher assigns the review, students are expected to participate, and accounts are required to access the activity. Under New York Education Law 2-d and Part 121, a district disclosing personally identifiable information to a third-party contractor needs a data privacy agreement with required terms, and parents must have access to a parents’ bill of rights. The district has neither. FERPA’s school-official exception also requires the vendor to be under the district’s direct control, typically through a written agreement; none exists. Because many seventh graders are under 13, COPPA is also implicated: the site collects names, email, and birth date and admits sharing with partners and advertising. School consent for an educational tool is narrow and does not authorize commercial data sharing.
I would preserve the parent’s email, ask the teacher to stop new sign-ups, and determine whether a no-account or teacher-only mode exists. If not, I would use an approved low-risk alternative for the next review cycle. I would also support the parent’s deletion request through the vendor and district channels rather than telling her the site is harmless. The birth date field is unnecessary for a quiz tool, and ads plus partner sharing are red flags, not minor terms of service.
2. Design a review process the district can use before approving free or low-cost digital tools. Include the roles, the evidence required, and a workable timeline.
Read the worked answer
I would create a short, predictable approval workflow rather than a blanket ban. The teacher submits a one-page request naming the instructional purpose, the data collected, whether accounts are required, and the intended grade levels. The educational technology specialist screens for necessity and instructional fit. The data privacy officer or designated administrator checks for a signed data privacy agreement, the parents’ bill of rights, retention and deletion terms, subcontractors, advertising, and security safeguards. The vendor completes a standard questionnaire and provides its privacy policy and, where relevant, accessibility documentation. The principal or curriculum director approves or denies within ten school days, with an expedited path for tools that need no student accounts.
The district should maintain a public approved-tool list and a short list of reviewed alternatives so teachers are not forced to choose between compliance and engagement. Free tools should not receive a lower standard because they are free; in some ways they need more scrutiny because the business model may depend on data. I would also build an annual recheck and a breach-reporting route. For the faculty meeting, I would present the process as a support channel, not a punishment, and invite two teachers to pilot the request form so it is usable in real planning time.
3. The teacher argues that the platform is the most engaging review tool she has and that removing it will hurt student learning. How do you respond while preserving the instructional relationship?
Read the worked answer
I would begin by acknowledging the real instructional value: quick feedback, competition, and high participation are legitimate goals. Then I would separate the goal from the tool. The district is not saying engagement is unimportant; it is saying the current data practices are not acceptable. I would offer to co-plan a replacement that keeps the same game-like structure, such as a teacher-paced review with no student accounts, a shared slide deck with team scoring, or an approved platform that permits anonymous nicknames and no birth date. If the teacher wants to keep the platform, I would help her ask the vendor about a district agreement and a no-ads, no-data-sharing education version.
I would also be transparent about the risk: a parent complaint is already in motion, and continuing use could create a reportable data incident and erode trust. I would avoid framing the teacher as careless. Instead, I would say that the district previously gave her no review process, which is a system failure. I would invite her to join the pilot group that tests the new approval form, since her concern about engagement is exactly the perspective the process needs. The relationship is preserved by treating her as a professional who must now work within a constraint, not as an adversary.