← All questions
Privacy & Student Data
How should schools evaluate an AI tool's privacy practices?
Ask what is collected, why, where it is stored, who can access it, how long it is kept, whether it is used to train models, and what the school can delete or export. Do that before the tool is approved — not after students are already using it.
Evaluation is a checklist, not a logo on a homepage. IT and privacy officers should get written answers on collection, purpose, retention, subprocessors, training use, student-account model, and deletion. Teachers should not be left to click “accept” on a consumer terms page.
Compare those answers to your policy and to what you will tell families. If the vendor cannot answer clearly, that is a finding.