I learned that FERPA, COPPA, and state laws set the rules, but best practices like secure storage, access control, and data minimization are what actually protect students. PII is broader than most people think.
I plan to review our current data practices, tighten vendor approvals, and make sure staff understand what's required. Also need to be more transparent with families about how their data is used. Simple, consistent, and necessary.