天美麻豆

Get stories like this delivered straight to your inbox. Sign up for The 74 Newsletter

Virginia鈥檚 Fairfax County Public Schools, one of the nation鈥檚 largest districts, should make several changes to safeguard student privacy, according to legal experts who investigated the recent accidental release of sensitive, confidential records on more than 35,000 students. 

Several of the documents were internal memos about special education services and litigation brought against the district by two former students who alleged they’d been sexually assaulted. One spreadsheet identified at least 60 students struggling with mental health issues, including some who had been hospitalized or engaged in self harm.

Investigators said that in the future, attorneys should review and label files before a parent inspects them and urged staff throughout the district to be trained on the 鈥渋mportance of redacting and safeguarding confidential information.鈥� In Thursday, Superintendent Michelle Reid said the district would comply with all of the recommendations.

The brief summary of leaves several questions unanswered, including which district officials were responsible for the disclosure and how such a massive breach occurred after a string of similar incidents in recent years.

The 74 first reported on the most recent episode on Nov. 1, two weeks after Callie Oettinger, a parent in the district, reviewed documents that she requested on her own children, a daughter in high school and a son who graduated in 2022.听She discovered later that the information she copied and downloaded onto thumb drives included private information on thousands of other students.

The disclosure was just the latest in a series of student privacy incidents within the 178,000-student district in recent years. In 2020, obtained Social Security numbers, birthdates and other data on over 170,000 students and employees. In the early weeks of the pandemic, students were subjected to racist and obscene comments and other harassment in that weren鈥檛 protected with a password. And multiple parents told The 74 they have mistakenly received other students鈥� special education records or that their children鈥檚 information has been shared with other parents or staff members. 

In 2019, a former superintendent apologized when staff members forwarded information on Oettinger鈥檚 son to the wrong people and promised to train staff to prevent future occurences. But in 2021, the district released private data on about a dozen students to another parent, Debra Tisler. Tisler shared the information with Oettinger, a special education advocate, who published redacted versions on . The district sued both parents to get the records back, but .听

A day after The 74鈥檚 report, Reid apologized and announced that a firm with expertise in cybersecurity 鈥� 鈥� would investigate how the incident occured. Nearly six weeks later, parents whose children were named in the records received a letter notifying them of the disclosure and the district set up a phone line to provide them with more information.听

The summary of the investigation showed that 鈥渙lder thumb drives containing unredacted files鈥� were 鈥渦nintentionally and unknowingly left within boxes accessible鈥� to Oettinger when she went to her local high school for an in-person review of her children鈥檚 records. The probe also included 鈥渁 forensic examination of a laptop鈥� Oettinger used while she was there.

But Oettinger said the lead investigator, Beth Waller, never contacted her. Waller did not return calls or emails seeking comment.听

Reid鈥檚 letter to families stated that Oettinger and her attorney 鈥減rovided declarations under oath and penalty of perjury stating they have deleted and do not have any of the identifiable student information that was involved in this incident.鈥�

Oettinger said she wished the district had made greater efforts to clarify that she didn鈥檛 release any student鈥檚 private information.听

She published examples of the documents on her advocacy website to further underscore the point that the district didn鈥檛 protect sensitive student data. But she redacted personal identifying information before posting.听

The investigators called the incident 鈥渁 unique set of circumstances鈥� and an 鈥渦nusual review,鈥� another description Oettinger objects to. The Individuals with Disabilities Education Act gives parents the right to review records in person.听

In Fairfax, parents are split over whether Oettinger did the right thing in failing to initially inform the district of the error.听

鈥淗ow do we file a lawsuit against her?鈥� one asked on Facebook. 鈥淟et鈥檚 def (sic) all band together!鈥�

Another wrote, 鈥淒o you understand the stress and anxiety you have caused to thousands of families in your self-righteous quest for 鈥榡ustice?鈥� 鈥�

But Oettinger said past privacy violations made her skeptical that the district would properly address the matter.

Other parents defended Oettinger鈥檚 actions. 鈥淚f she hadn’t reported it to the public, we would never have known about it,鈥� said Jill Janson, who has two children whose information were included in the records released. 鈥淚f [Fairfax County Public Schools] isn’t uber careful with a parent they have a long history with regarding data spills, then just how careful are they with a regular person off the street?鈥�

Oettinger has complained several times to the Virginia Department of Education about the October disclosure. But state officials maintain that the district does not have a systemic problem. 

In October, following a previous complaint, the state said the district had assured officials that staff members would receive training on student privacy. That training began Oct. 31, but the district did not respond to a question on how many staff members completed it.听

鈥淭his school division is the Commonwealth鈥檚 largest,鈥� Cecil Creasey Jr., a state hearing officer, wrote Dec. 11 when he ruled on an appeal from Oettinger. The district鈥檚 size, he said, is not an excuse, but helps to explain why such errors聽occurred.

But Oettinger and other critics argue the district should be able to secure student privacy given the millions of dollars it spends on legal fees.

鈥淚 have heard 鈥榟uman error鈥� too many times through the years,鈥� Oettinger said. 鈥淚t isn鈥檛 an excuse. Can you imagine the president accidentally including Putin in an email and then blaming human error?鈥�

Did you use this article in your work?

We鈥檇 love to hear how The 74鈥檚 reporting is helping educators, researchers, and policymakers.