Mount Sinai UFSD adopted an updated Student Records Regulation on June 17, 2026, detailing how the district protects student records under FERPA and New York Education Law §2-d. The regulation explicitly addresses electronic transmission of personally identifiable information (PII), use of encryption and password protection, and sets conditions for contracting with third parties that receive student PII. Any contract with a third-party vendor that involves student PII must now include a detailed data security and privacy plan, a signed Parents’ Bill of Rights, staff training requirements, access controls, encryption standards, and breach notification procedures.This suggests the district will scrutinize existing and future EdTech, SIS, assessment, and other IT vendors for compliance and may need support updating contracts and technical safeguards. Vendors with strong NY Ed Law 2-d compliance, FERPA-aligned security controls, and experience drafting required data privacy attachments can position themselves as partners in implementing these requirements across current and upcoming technology initiatives.

Regulation references related district policies 8635, 8635-R, and 8635-E for information and data privacy, security, breach notification, and the Parent’s Bill of Rights.