Complaints of Breaches or
Unauthorized Releases of PII
a parent/guardian, student, teacher, principal or other BOCES employee believes
or has evidence that student or teacher/principal PII has been breached or
released without authorization, they must submit this complaint in writing to
the BOCES. Complaints may be received by the Data Privacy Officer or District
Superintendent, but may also be received by any BOCES employee, who must
immediately notify the Data Privacy Officer.
This complaint process will be communicated to parents, eligible
students, teachers, principals, and other BOCES employees.
BOCES will acknowledge receipt of complaints promptly, commence an
investigation, and take the necessary precautions to protect personally
its investigation of the complaint, the BOCES will provide the individual who
filed a complaint with its findings within a reasonable period of time. This
period of time will be no more than 90 calendar days from the receipt of the
the BOCES requires additional time, or if the response may compromise security
or impede a law enforcement investigation, the BOCES will provide the
individual who filed a complaint with a written explanation that includes the
approximate date when the BOCES will respond to the complaint.
BOCES will maintain a record of all complaints of breaches or unauthorized
releases of student data and their disposition in accordance with applicable
data retention policies, including the Records Retention and Disposition