Ohio Senate Bill 29
Student Data Privacy Statement
When a school district uses EXPLR Pathways under a contract, EXPLR is a "technology provider" under Ohio Revised Code 3319.325–3319.327 (Senate Bill 29, effective October 24, 2024). For every district we work with:
- The district owns the records. Student names, grade levels, assessment responses, and Holland codes created under the contract are the district's educational records, not EXPLR's. The same goes for survey and quiz answers (including written answers and optional background questions), camp and internship rosters and sign-in usernames, program progress, internship applications, supervisor ratings and recommendations, recommendation letters, and records of when students were active in the tool.
- Limited use. We use them only to produce student reports, match students to programs, and show the district's educators aggregate results. We do not sell, share, or disseminate them, use them for advertising, or build student profiles for any other purpose. We may use de-identified aggregate data to maintain and improve the tool.
- Return or destruction. When the contract ends we return or destroy the district's records within 90 days, or sooner if the contract requires, and certify that we did. Independent of any contract, all student records are scheduled for deletion 24 months after creation.
- Access controls. Only EXPLR staff and interns who maintain the tool can access student records, under signed confidentiality agreements and FERPA training.
- Security. Encryption in transit and at rest, role-based access, and the safeguards in our Privacy Policy.
- Breach notice. If a breach affects a district's records, we give the district everything it needs to meet R.C. 1347.12, promptly after discovery.
- No device monitoring. EXPLR Pathways does not track location, access cameras or microphones, or monitor keystrokes or browsing on school-issued devices.
- Contract inspection. Parents and eligible students may review our contract with their district by contacting the district.
We will sign the Ohio Student Data Privacy Agreement (SDPC NDPA) with any district that prefers it. Questions: [CONTACT EMAIL].