Skip to content

Third Party Access Granted: Postmortem on Student Privacy

Sharlene Toney

Examines student data pipelines, third-party vendor integrations, consent frameworks, and privacy challenges across enterprise university systems.

Summary

A student privacy researcher and advocate presents a critical postmortem on student data privacy on the Creator Stage, examining how legal exemptions and digital learning platforms expose student records to commercial entities [06:18, 12:13]. The speaker critiques broad institutional definitions of "directory information" under FERPA, explaining how loosely regulated classifications allow colleges to share sensitive student records without explicit consent.

The talk reveals how educational institutions routinely transmit bulk student data to external third parties, including the National Student Clearinghouse, financial aid vendors, and commercial predictive analytics services [18:00]. The speaker explains how aggregated academic histories and enrollment data are used to generate predictive algorithms and retention scores [23:45], highlighting the ethical hazards of non-consensual profiling. The session calls on students and faculty to demand transparency through mandatory disclosures of institutional data-sharing contracts and enforceable student opt-out rights [29:48].

(AI summary — Gemini Flash)

Related talks