Open records request goof exposes personal info of 36,000 Poway USD students and their parents
The privacy breach leaked information about every student in the district and it included: medical information, home addresses, nicknames, birthdates, student grades, test scores and parents’ sensitive occupations.
The San Diego Union-Tribune provides a bit more detail on the data types:
The data included children’s names, nicknames, addresses, phone numbers, hearing and vision exam results, dates of birth, language fluency, academic test results and occupation of parents, according to the woman who received the data, Gabriela Dow.
Gabriela Dow told CBS News 8 she received the sensitive information after an open records request. Dow is a parent and a member of the district education technology advisory committee.
Reportedly, Social Security numbers were not included.
All told, about 70,000 people had personal information exposed:
A month later, she received the documents she asked for, and much more — a spreadsheet containing 36,444 rows of data on information for everyone connected to the Poway district. Including parents, the data contained information about 70,000 people.
Now here’s a complaint that will likely go nowhere:
Dow filed a complaint with the district attorney’s office citing violation of the “Family Educational Rights and Privacy Act,”
What can a district attorney do about a violation for FERPA?