Less Data Collected, Less Data Exposed: Minimization, Retention, and Destruction
January 28, 2026
WEBINAR
LOCATION:
Virtual
TIME:
2pm ET / 11am PT
Can’t attend in person?
One of the main privacy goals for schools when creating and sharing student data is to make sure it is protected at each phase of the data lifecycle. Two important principles that help reduce the risk of exposure are data minimization (limiting what you share and use to only what is necessary) and data destruction (destroying the data or transferring it to the student once it is no longer needed).
In this panel for Data Privacy Day, we’ll look specifically at how schools can use the Student Data Privacy Consortium’s (SDPC) National Data Privacy Agreement (NDPA) when negotiating with a vendor to ensure that only necessary data are shared and then look at how it can be used at the end of the agreement to ensure that the vendor doesn’t retain data longer than necessary.
Moderator:
David Sallay, A4L Community
Panelist:
Mark Williams, F3 Law
Maren Peterson, Utah Division of Archives and Records Service
Leslie Erickson, Beaverton School District
Space is limited to 500 registrants.
If you will not be able to attend in person, but would like to receive a recording of the webinar, please sign-up here.
Webinar Takeaways:
- How to use Exhibit B to minimize the data you share with vendors
- How to learn more about your state's data retention schedules and figure out how long you're legally required to retain data
- Cases where you should transfer data to the student or parent instead of deleting
- How to utilize Exhibit D at the end of an agreement
- Steps to take when a vendor says they can't delete your data
Audience:
IT, legal, or privacy professionals in schools that approve educational technology apps