Which action most clearly violates typical student data privacy policies?

• A. Limiting data access to authorized personnel.
• B. Sharing student records with an outside vendor with proper data-use agreement.
• C. Storing data on a password-protected school device.
• D. Posting student names with grades publicly.

Answer: (D)

Protecting student information means restricting who can see identifiable data and ensuring it’s shared or displayed only through proper, secure channels. Posting student names with grades publicly makes that information visible to a broad, unintended audience and is the clearest violation of privacy policies. It exposes personal data without consent or a legitimate need-to-know, which privacy rules aim to prevent.

Limiting data access to authorized personnel is exactly how privacy protections work, keeping sensitive information in the hands of those who need it. Sharing student records with an outside vendor can be permissible if there’s a proper data-use agreement and safeguards in place to protect the data. Storing data on a password-protected school device demonstrates a basic, appropriate security measure.