Policy 6410 Acceptable Use Proposed .pdf

Board of Education of the Webster Central School District Policy 6410 SUBJECT:​

STAFF ACCEPTABLE USE POLICY

The Board will provide staff with access to various computerized information resources through the District's computer system (DCS) consisting of software, hardware, computer networks, wireless networks/access, and electronic communication systems. This may include access to electronic mail, on-line services, and the Internet. It may also include the opportunity for staff to have independent access to the DCS from their home or other remote locations, and/or to access the DCS from their personal devices. All use of the DCS and the wireless network, including independent use off school premises and use on personal devices, will be subject to this policy and any accompanying regulations.

The Board encourages staff to make use of the DCS to explore educational topics, conduct research, and contact others in the educational world. The Board anticipates that staff access to various computerized information resources will both expedite and enhance the performance of tasks associated with their positions and assignments. To that end, the Board directs the Superintendent or designee(s) to provide staff with training in the proper and effective use of the DCS.

Staff use of the DCS is conditioned upon written agreement by the staff member that use of the DCS will conform to the requirements of this policy and any regulations adopted to ensure acceptable use of the DCS. These agreements will be kept on file in the District Office.

Generally, the same standards of acceptable staff conduct which apply to any aspect of job performance will apply to use of the DCS. Employees are expected to communicate in a professional manner consistent with applicable District policies and regulations governing the behavior of school staff.

Access to confidential data is a privilege afforded to District employees in the performance of their duties. Safeguarding this data is a District responsibility that the Board takes very seriously. Consequently, District employment does not automatically guarantee the initial or ongoing ability to use mobile or personal devices to access the DCS and the information it may contain.

This policy does not attempt to articulate all required and/or acceptable uses of the DCS; nor is it the intention of this policy to define all inappropriate usage. Administrative regulations will further define general guidelines of appropriate staff conduct and use as well as proscribed behavior.

District staff will also adhere to the laws, policies, and rules governing computers including, but not limited to, copyright laws, rights of software publishers, license agreements, and rights of privacy protected by federal and state law.

Staff members who engage in unacceptable use may lose access to the DCS and may be subject to further discipline under the law and in accordance with applicable collective bargaining agreements. Legal action may be initiated against a staff member who willfully, maliciously, or unlawfully damages or destroys property of the District.

Social Media Use by Employees

The District recognizes the value of teacher and professional staff inquiry, investigation and communication using new technology tools to enhance student learning experiences. The District also realizes its obligations to teach and ensure responsible and safe use of these new technologies. Social media, including social networking sites (SNS), have great potential to connect people around the globe and enhance communication. Therefore, the Board encourages the use of District-approved social media tools and the exploration of new and emerging technologies to supplement the range of communication and educational services.

Public social media networks or SNS are defined to include: websites, Web logs (blogs), wikis, social networks, online forums, virtual worlds, video sites, and any other social media generally available to the District community which do not fall within the District's electronic technology network. The definition of District approved password-protected social media tools are those that fall within the District's electronic technology network or which the District has approved for educational use. Within these internal forums, the District has greater authority and ability to protect minors from inappropriate content and can limit public access.

The use of social media (whether public or internal) can generally be defined as Official District Use, Professional/Instructional Use and Personal Use. Personal use of social media or SNS by employees during District time or on District-owned equipment is allowed on a limited basis. In addition, employees are encouraged to maintain the highest levels of professionalism when communicating, whether using District devices or their own personal devices, in their professional capacity as educators. They have a responsibility to address inappropriate behavior or activity on these networks, including requirements for mandated reporting and compliance with all applicable District policies and regulations.

Confidentiality, Private Information and Privacy Rights

Confidential or private data, including, but not limited to, protected student records, employee personal identifying information, and District assessment data, will only be loaded, stored, or transferred to District-owned devices which have encryption and/or password protection. This restriction, designed to ensure data security, encompasses all computers and devices within the DCS, any mobile devices, including flash or key drives, and any devices that access the DCS from remote locations. Staff will not use email to transmit confidential files in order to work at home or another location. Similarly, staff are prohibited from using external cloud-based storage services for confidential files.

In addition, staff will not leave any devices unattended with confidential information visible. All devices must be locked down while the staff member steps away from the device, and settings enabled to freeze and lock after a set period of inactivity.

Staff data files and electronic storage areas will remain District property, subject to District control and inspection. The Technology Coordinator may access all staff data files and communications without prior notice to ensure system integrity and that users are complying with requirements of this policy and any accompanying regulations. Staff should not expect that information stored on the DCS will be private.

#7316 -- Student Use of Personal Technology #8271 -- Internet Safety/Internet Content Filtering

SUBJECT:​ ACCEPTABLE USE POLICY (PERSONNEL) The District provides access to digital information systems through the District's computer network. This policy establishes acceptable use expectations, safeguards district information resources, and assists in compliance with applicable laws, regulations, and district procedures. Definitions For the purposes of this policy, the following definitions apply: a)​

"Digital information systems" means: 1.​

All computer hardware, devices, and systems owned or leased by the District, including but not limited to: (a)​ Computers of any size and form factor, including smartphones, tablets, and interactive whiteboards; (b)​ Networks; (c)​ Internet access; (d)​ Network servers; (e)​ Routers, cables, and switches; (f)​

Video conferencing equipment; and

(g)​ Internet of things devices (devices that collect and share data, such as security systems or wearable devices); and 2.​

b)​

Software that is owned, leased, or licensed by the District, or that the District has the use of through a cooperative services agreement (CoSer), and that is used to create, modify, store, or transmit information in a digitized form.

"Personnel" means all district employees, substitutes, contractors, consultants, student teachers, volunteers, and any other individuals granted access to district digital information systems.

Overview Accessing these district systems indicates agreement by district personnel to adhere to this policy. The District will provide reasonable oversight for their digital information systems, however, responsibility for their use ultimately lies with the individual user. Except for any privilege or confidentiality recognized by law, district personnel have no legitimate expectation of privacy during any use of the District's digital information systems or in any data on those systems. Any use may be monitored, recorded, or accessed in any manner by authorized personnel without additional prior notice to personnel. Periodic monitoring may be conducted of digital information systems used, including, but not limited to, all computer files and all forms of electronic communication.

The District reserves the right to impose restrictions on the use of particular digital resources. For example, the District may block access to websites, services, or applications not serving legitimate business or educational purposes or may restrict users' ability to attach personal devices to the District's digital information systems or devices. Acceptable Use All uses of district digital information systems by district personnel must comply with district policies, standards, procedures, and regulations, as well as any applicable federal and state laws and regulations, including but not limited to copyright laws and licensing agreements. ​

Acceptable uses of the district digital information systems include, but are not limited to, the following:

​

a)​

Protecting confidential information and student data from unauthorized use or disclosure;

​

b)​

Using digital information systems to support student learning and district business operations;

​

c)​

Maintaining professional conduct in online communications and behavior as in all other aspects of work;

​

d)​

Reporting suspected cybersecurity incidents to appropriate district information technology personnel immediately; and

​

e)​

Observing authorized levels of access and utilizing only approved digital information system devices and services.

Unacceptable Use The following list is not intended to be exhaustive, but provides a framework for determining activities that constitute unacceptable use of district digital information systems.

Unacceptable uses of the district digital information systems include, but are not limited to, the following: a)​

Distributing, transmitting, posting, or storing any electronic communications, materials, or correspondence that is threatening, obscene, harassing, pornographic, offensive, defamatory, discriminatory, inflammatory, illegal, or intentionally false or inaccurate;

b)​

Engaging in unauthorized use or disclosure of personal, private, sensitive, and/or confidential information, including entering this information into generative artificial intelligence (AI) or other AI systems;

c)​

Connecting unapproved devices to the district digital information systems;

d)​

Installing, downloading, or running software that has not been approved in accordance with district policies;

e)​

Using district digital information systems for commercial or personal purposes, including solicitation or advertisement, in support of religious, political, not-for-profit organizations, for-profit business activities, or in support of other outside employment or business activity;

f)​

Providing unauthorized third parties access to the district digital information systems;

g)​

Tampering with, disengaging, or otherwise circumventing district-implemented IT security;

h)​

Plagiarizing or engaging in copyright infringement; and

i)​

Using district digital information systems to access personal social media platforms, email, or other personal account-based platforms.

Individual Accountability Individual accountability is required when accessing all district digital information systems. Users must comply with district procedures and any other applicable district documents for data networks and security access which may include password protocols, use of multi-factor authentication, and other security measures as defined by the District. All users must treat their credentials as confidential information which must not be disclosed or shared. All users are responsible for protecting against unauthorized activities performed under their user ID, devices, or any other district system. Engaging in any personal use of district information systems. Social media users should be aware that information posted on social media platforms reflects on the individual and may also reflect on their professional life. Consequently, users should use discretion when posting information on these platforms. Once information is posted on a social media platform, it can be captured and used in ways not originally intended by the original poster. Compliance

Any violation of this policy may subject the user to disciplinary action, civil penalties, and/or criminal prosecution. The District will review alleged violations of this policy on a case-by-case basis and pursue recourse, as appropriate.

NOTE:​

Refer also to Policies #5672 -- Information Security Breach and Notification #5676 -- Privacy and Security for Student Data and Teacher and Principal Data #5850 -- Data Networks and Security Access #5851 -- Cybersecurity Incident Response #6411 -- Use of Email in the District #6412 -- Social Media Use #8271 -- Internet Safety/Internet Content Filtering