This paper should be of interest to the readers of this journal because it addresses a subject that has received little scholarly attention; namely, local government cybersecurity. The U.S. has over 90,000 units of local government, of which almost 39,000 are "general purpose" units (i.e., municipalities, counties, towns and townships).…

A socio-legal analysis of the UK governance regime for data collected from children at school for teaching and learning contrasts the government-mandated data collection by schools to inform educational policy and planning with data processed and shared with third parties by commercial EdTech providers. We find the former is effectively governed…

Organizations face many cybersecurity threats. Among those threats, social engineering attacks such as phishing stand out as a constant and costly struggle. The primary tools for combating social engineering are information security policy (ISP) and security awareness training (SAT), which seek to inform users of the threat of social engineering,…

In today's Information society it is an everyday scenario to be a part of an online community such as social media. Participation has become almost mandatory to the point of acting as a virtual extremity to one's physical environment. This virtual extremity is the individual's window to the outside world and vice versa. The process of being a part…

In today's data-sharing paradigm, personal data has become a valuable resource that intensifies the risk of unauthorized access and data breach. Increased data mining techniques used to analyze big data have posed significant risks to data security and privacy. Consequently, data breaches are a significant threat to individual privacy. Privacy is…

Each year, state legislators craft new policies that drive data use across their states, and as part of a comprehensive review of state education data legislation, the Data Quality Campaign (DQC) keeps track. In 2022, state legislators introduced 131 bills in 35 states--42 of which became law in 17 states-- that would govern the use of data along…

Matters of data privacy related to social media are increasingly relevant for educators as happenings such as the 2018 Cambridge Analytica scandal have attracted public attention. Many educators use social media for professional purposes, including with their students and should, therefore, be knowledgeable regarding data privacy issues that…

In 2021, legislators in 45 states introduced 361 bills to govern the use of data about education or the workforce, and leaders in most states (38) enacted a new education data law. This level of legislative activity that is focused on education data collection, use, protection, and reporting is nothing new. But the ongoing pandemic left unique…

The study of employees' intention to comply with information security policies in higher education is limited. This research thus embarks on an empirical analysis of the factors predicting employees' intention to comply or the lack thereof with respect to their institutions' policies. The theoretical frameworks utilized by the study's model for…

This article critically considers these recent developments and political context, proposing an approach to manage sensitive research in the complex contemporary political environment. The first part of the article defines security-sensitive research as research having risk associated with foreign interference, cybersecurity, biosecurity or…

In 2020, state legislators have remained focused on making data available to address education challenges. More and more, policymakers are introducing bills that would address the information needs of students, educators, parents, and the public, though most new education data laws do not systematically support data use. As the COVID-19 crisis…

In an effort to slow the spread of the highly infectious disease coronavirus (COVID-19), school districts around the world closed school buildings, thrusting educators into emergency remote teaching. Although many vendors were quick to release tutorial guides and free trials for their online learning resources, the growing concern over student…

The Student Privacy Policy Office (SPPO) is performing a four-year review of a sample of the websites of 1,504 local education agencies (LEAs) to identify whether and how these websites include information about student privacy. In each year of the study, SPPO is reviewing a nationally representative sample of 376 LEA websites, focusing on whether…

Although the Children's Online Privacy Protection Act (COPPA) was enacted 20 years ago, the recently updated General Data Protection Regulation (GDPR) has renewed public interest in privacy policies. Under both COPPA and GDPR, companies must abide by strict regulations protecting children's personal data. Lengthy and oftentimes ambiguous policies…

In 2019, legislators on both sides of the aisle in nearly every state proposed legislation addressing the use of data to inform decision-making to support students on their path to success. Through proposed legislation, many of these policymakers took steps to improve the foundational data systems and processes that make data work for students and…