I was just getting around to reading an article (see middle of page 5) out of Iowa that Scott M. clued me into regarding the new Family Education Rights and Privacy Act (FERPA) regulations that came out late last year. Michelle at the Connecticut Ed. Law Blog posted some of the major changes, but one change in particular is of interest regarding biometric records. In particular I think Scott and I are concerned about the following interpretation from Matt Carver, the Director of Legal Services for the School Administrators of Iowa.
...Now, unless an eligible student or parent has given approval, staff
should not turn over documents during records requests that have
student handwriting on them, even if names are redacted. Likewise,
if someone requests a copy of a podcast made in a speech class, you
should not pass on that recording without permission from eligible
students or parents if the recording includes student voices...
Okay, first, here are the applicable provisions:
Personally Identifiable Information
The term includes, but is not limited to--
(a) The student's name;
(b) The name of the student's parent or other family members;
(c) The address of the student or student's family;
(d) A personal identifier, such as the student's social security
number, student number, or biometric record;
(e) Other indirect identifiers, such as the student's date of
birth, place of birth, and mother's maiden name;
(f) Other information that, alone or in combination, is linked or
linkable to a specific student that would allow a reasonable person in
the school community, who does not have personal knowledge of the
relevant circumstances, to identify the student with reasonable
certainty; or
(g) Information requested by a person who the educational agency or
institution reasonably believes knows the identity of the student to
whom the education record relates.
And here is the definition of biometric record:
Biometric record, as used in the definition of personally identifiable information, means a record of one or more measurable biological or behavioral characteristics that can be used for automated recognition of an individual. Examples include fingerprints; retina and iris patterns; voiceprints; DNA sequence; facial characteristics; and handwriting.
Okay, so one possible interpretation of these provisions is that no student data should ever leave the classroom ... never, ever, ever! No essays in the hallway, no pictures on the website, no filming of sporting events or school plays or graduations, just generally no records whatsoever, because most of those records are going to contain some biometric record (you could even argue that the student fingerprints on papers circulated in class could violate this provision - and consider how much would contain DNA). Heck, to be safe, you should probably never record or copy anything from your classroom.
Alright, I hear you; that is an extreme interpretation and one that I don't think even Matt in Iowa is suggesting, but it is the logical extension of his argument because if we come at this with the notion that anything that could possibly lead to an identification of a student by an NSA scientist is illegal ... then, well, everything is pretty much illegal because those guys are wicked smart and have lots of really cool tools.
So, in my view, the more reasonable interpretation of this provision is the school actually releasing a real voiceprint, which apparently has a definition in security circles. This would make sense within the context of the other items in the list (a little noscitur a sociis for you legal beagles). Also, the inclusion of the clause "used for automated recognition" here is vital because it is not the people the definition is so concerned about as it is the machines and machines need systematic, replicable patterns in pre-determined formats. Thus, a machine is not just going to pull a voice in a podcast and automatically link that to a student - and I think the same goes for handwriting and pictures. So, my interpretation of this provision, at least tentatively until I can do some more research, is that biometic records sort of means what you think it would in it's plain meaning - a systematically and scientifically generated student record meant to identify a student by machines. I think the science-fictiony idea that comes to mind is what the DOE meant, not the broad, all encompassing possible definition. So, let's keep our interpretation of this provision under control until we are explicitly told otherwise by the Courts, Congress or the DOE.
Bottomline, FERPA cannot be interpreted as building a total and complete wall between the school and the community. We would have really bad schools if that happened and very disengaged students. This is a good example of where the lawyers can't get in the way of the learning. Podcasting is a fabulous learning tool. Digital storytelling, amazing. I love Voicethread, as do thousands of educators around the country. Sharing is an important part of learning and the ability to share has increased exponentially in the past couple decades. Some students right here in Kentucky are sharing with students in Brazil everyday, for instance. FERPA cannot be extended to prohibit all of this sharing.
Anyway, I hope to return to this subject in the relatively near future, but welcome any thoughts, comments or experiences from your schools or universities about how this is being implemented.