Keystone Oaks App List Leaves Parent Consent, Data Access Unclear | The Locally Times
The district launched a public list of approved digital tools to comply with federal rules, but records do not specify which third-party apps can access student data or how parents can provide consent.
The Keystone Oaks School District announced on April 22, 2026, a new initiative to increase transparency around the digital tools students use in the classroom. According to a notice posted by the district, it is publishing an online, searchable list of all approved digital applications, which will include links to each company’s privacy policy. The federal rule requires companies providing online services to children under 13 to be transparent about the information they collect, how it is used, and to obtain parental consent. The district’s announcement acknowledges its responsibility in this area, as it selects and mandates the use of many of these digital tools for learning. The district set a target date of April 22, 2026, for achieving full compliance with the updated federal requirements. The public notice, however, does not detail the specific updates to COPPA that are driving these changes, define the benchmarks for achieving full compliance, or clarify whether the district is currently compliant with existing regulations. ## The Google Workspace Ecosystem Central to the district’s digital infrastructure is Google Workspace for Education. The district’s April 22 notice confirms that it provides student personal information to Google to create these accounts. Through these accounts, students access a wide array of Google services, which the district divides into two categories. The first category, which the district calls Core Services, forms the foundation of the digital learning environment. The district’s notice lists these services as: Assignments, Calendar, Classroom, Cloud Search, Drive and Docs, Gmail, Google Chat, Google Chrome Sync, Google Meet, Google Vault, Groups for Business, Keep, Migrate, and Sites. Second, the district allows students to use their school accounts to access what it terms Additional Services. The notice specifically names YouTube and Google Maps in this category. The document provides no further details on how the use of these services is monitored or if their use is required for educational purposes. ## Third-Party Apps and Missing Consent The district’s transparency effort does not answer key questions, particularly concerning the use of applications from outside the Google ecosystem. The April 22 notice states that students are allowed to access other third-party services using their Google Workspace for Education accounts. It further specifies that the school administrator enables access to these services and authorizes their use. However, the public document is incomplete. The process for approving these external tools, the data they are authorized to collect, and their privacy policies remain unspecified in the announcement. Furthermore, while the district’s notice states the new searchable list will allow families to review the privacy practices of listed companies, it does not detail what parental options are available beyond review. The documents do not describe a mechanism for parents to provide or withhold consent for specific applications, a key requirement of COPPA. The process for how the district obtains and manages the required parental consent for students under 13 is not defined. ## Unaddressed Security and Financial Details Beyond the list of approved tools, the district’s announcement does not address other critical aspects of student data privacy. The records do not contain information regarding the district's data security protocols, its liability in the event of a data breach involving a third-party vendor, or the policies governing the long-term storage and use of student data by these companies. Additionally, the financial relationship between the Keystone Oaks School District and the technology providers, including Google and the unnamed third-party services, is not disclosed in the announcement. The records do not specify any licensing fees, contract terms, or other financial arrangements. The full extent of third-party access to student data and the precise nature of parental control over that access remain undefined in public documents.