DiNapoli: Schools Must Do More To Limit Access To Sensitive Student Data
Employees in six Central New York school districts including Madison and Poland Central Schools had inappropriate computer access to sensitive student data according to a report released by State Comptroller Thomas DiNapoli.
The report says several school computer system users had access to functions that were outside their job duties and responsibilities like changing grades and attendance records.
Auditors found that users, including outside vendors were able to make grade changes without proper authorization.
DiNapoli is recommending that the districts in question establish written policies like using a formal authorization to access student information and procedures for monitoring user access.
The other school districts named in the report are Altmar-Parish-Williamstown Central School District, Indian River Central School District, Lowville Academy and Central School District and Westhill Central School District.