NY Education Law §2-d Addendum
The New York student-data-privacy addendum (Ed Law §2-d and 8 NYCRR Part 121) that supplements and, on any conflict, controls over the main Agreement.
Why it exists
Brings the engagement into conformance with NY Education Law §2-d and Part 121, the state’s student-data privacy and security law. On any conflict with the Agreement, this Addendum controls.
Protected Data belongs to the district
All Protected Data originates from and stays under the control of the school/district; AskElira has no independent rights in it.
No sale, no marketing, no model training
AskElira will not sell PII or use it for any marketing/commercial purpose, and will not use Protected Data to train or improve AI beyond the contracted services.
Access limits & disclosure
Internal access is limited to those with a legitimate educational interest; PII is not disclosed to third parties except as needed to provide the service, with parental consent, or as required by law (with notice to the district).
Parents’ Bill of Rights
AskElira supports the district’s obligation to provide a Parents’ Bill of Rights for Data Privacy and Security and maintains administrative, technical, and physical safeguards. The Addendum’s Exhibit B (the §121.3 supplemental information) is also published on this site as a standalone, ready-to-append document: Parents’ Bill of Rights — Supplemental Information.
Breach detection & 48-hour notification
AskElira runs automated, around-the-clock security monitoring over the systems that hold Protected Data. If we discover a breach or unauthorized disclosure, we notify the affected school promptly — our operational standard is within 48 hours of detection — with what happened, what data may be involved, and a named contact, so the district can meet its own parent and NYSED Chief Privacy Officer notification duties under §2-d.