Student Privacy & Data Compliance
The Bill of Rights Institute is committed to protecting the privacy and security of students, educators, and other participants in our educational programs. This page explains how BRI collects, uses, protects, and shares information associated with student and educator accounts, programs, contests, events, and other educational activities.
BRI may provide additional privacy notices, terms, releases, or authorizations for particular programs or activities where additional information is required.
Student and Educator Privacy at BRI
BRI provides educational resources, accounts, programs, contests, events, and other opportunities for students and educators. The information BRI collects depends on how an individual chooses to interact with BRI.
Not every category of information described on this page is collected from every user. BRI seeks to limit the collection and use of personal information to information reasonably necessary to provide, administer, secure, and improve its educational resources, accounts, programs, and activities.
Children Under 13
BRI does not knowingly collect personal information online directly from children under 13. If BRI learns that such information has been collected, BRI will promptly review the matter, restrict further use, and securely delete the information unless retention is required by law. Any associated account will be disabled.
Our Student Privacy Commitments
BRI applies additional protections when personal information relates to students and minors. Depending on the account, program, contest, event, or activity, BRI may require age verification, parent or guardian consent, acknowledgments, media releases, or other authorizations.
Limited Collection
BRI seeks to collect only information reasonably necessary to provide educational resources, accounts, programs, contests, events, awards, and related services.
Appropriate Use
Student Personal Information is used to administer BRI educational activities and for reasonably related operational purposes such as security, support, legal compliance, and program evaluation.
Limited Access
Access to nonpublic student information is limited according to authorized purpose and job responsibilities.
No Sale of Student Data
BRI does not sell Student Data or provide Student Data to third parties for their independent advertising, marketing, solicitation, or profiling purposes.
Personal information BRI collects from or about an individual in connection with that individual's participation as a student in a BRI account, program, competition, event, or other educational activity.
Personal information or education records provided to or made available to BRI by or on behalf of a school or educational agency under an applicable student data privacy agreement or other applicable agreement.
Information We Collect for Student and Educator Accounts and Programs
Depending on how an individual interacts with BRI, we may collect the following categories of information. Not every category is collected from every user.
Additional information may be collected for particular programs, contests, events, travel, awards, or payments as described in the applicable program terms, privacy notice, release, or authorization.
Student and Educator Information at a Glance
| Information Category | Educators | Students | Typical Use |
|---|---|---|---|
| Account Information | Name and email address | Name and email address | Create and manage accounts; authenticate users; communicate about account activity |
| Authentication Information | Credentials and technical identifiers used to authenticate and maintain an account | Credentials and technical identifiers used to authenticate and maintain an account | Secure accounts, authenticate users, and maintain account access |
| Age or Eligibility Information | Generally not required except where relevant to a particular activity | Birthdate, age, or other age-verification information when required | Verify age or program eligibility and apply appropriate protections for minors |
| Educational Affiliation | School, organization, role, grade or subject areas, or professional information | School or educational affiliation when needed for a program | Provide relevant resources, administer programs, and verify eligibility |
| Contact or Fulfillment Information | Mailing address when materials are requested | Mailing or school address when needed to deliver program materials or awards | Deliver requested materials, prizes, or program resources |
| Program Information | Applications, participation information, surveys, communications, or supporting-teacher information | Applications, submissions, participation records, projects, communications, or program responses | Administer contests, programs, events, judging, and participation |
| Authorization Information | As applicable | Parent or guardian consent, acknowledgments, media authorizations, or other required permissions | Document participation and permissions for minors or particular activities |
| Payment or Tax Information | When payment is required | When a student receives a stipend, prize, reimbursement, or other payment | Process payments and satisfy tax, accounting, and legal requirements |
| Website and Technical Information | IP address, browser and device information, pages visited, and interactions with website features | Same information, where collected | Operate and secure websites, troubleshoot issues, understand usage, and improve resources |
Program-specific information may be collected where necessary for a particular contest, event, advisory council, scholarship, travel activity, award, or other student program. Where appropriate, BRI provides additional terms, privacy notices, releases, or authorizations describing those practices.
How We Use Student and Educator Information
BRI uses personal information primarily to provide and administer the educational resources, accounts, programs, events, contests, and other activities requested by users.
This may include authenticating accounts, communicating with participants, reviewing applications or submissions, determining eligibility, providing resources, administering awards or payments, and supporting participation.
BRI may also use information for reasonably related operational purposes, including security, fraud prevention, accessibility, technical support, legal compliance, recordkeeping, program evaluation, internal analytics, and improvement of BRI's educational resources and services.
BRI does not use Student Personal Information for materially unrelated independent advertising, marketing, solicitation, or commercial purposes.
Service Providers and Limited Disclosures
-
Service Providers
BRI uses service providers to support website hosting, authentication, data storage, communications, analytics, embedded media, payment processing, program administration, and AI-assisted features where offered. These providers may process information needed to perform their functions, including account information, website usage data, communications, and content submitted through the relevant feature.
Providers processing personal information on BRI’s behalf must use it only for authorized purposes and be subject to appropriate confidentiality, security, use, and retention restrictions. -
Program Administration and Authorized Activities
BRI may share personal information with authorized judges, program or event partners, and other individuals or organizations to administer BRI activities or carry out uses authorized by the individual or, where applicable, a parent or legal guardian.
Disclosures are limited to information reasonably necessary for the authorized purpose. Recipients must use the information only for that purpose and follow applicable confidentiality and security requirements. -
Independent Third-Party Uses
BRI does not sell Student Data and does not provide Student Data to
third parties for their independent advertising, marketing,
solicitation, or profiling purposes.
BRI will not permit a third party to use Student Data for its own unrelated commercial purposes merely because the third party provides services to, partners with, funds, or otherwise works with BRI.
Where BRI proposes to disclose personal information for a materially different purpose that requires additional notice, consent, or authorization, BRI will obtain such authorization as required by applicable law.
School Relationships and Education Records
BRI may provide educational services to schools, school districts, and educational agencies. When BRI receives or collects LEA Student Data, including education records, on an institution’s behalf, BRI uses that information only for the authorized educational purposes and in accordance with applicable law and school agreements
Access is limited to authorized personnel and service providers who need the information for those purposes and are subject to appropriate privacy and security restrictions. BRI does not use these records for fundraising, advertising, or unrelated purposes.
For records maintained on a school’s behalf, BRI coordinates requests for access, correction, or deletion with the school. BRI follows applicable legal and contractual requirements for retaining, returning, and securely deleting those records.
Programs, Contests, and Additional Privacy Notices
Some BRI programs, contests, events, advisory councils, scholarships, travel activities, awards, and other educational opportunities require information beyond what is ordinarily collected for a BRI account.
Depending on the activity, BRI may collect applications, student submissions, parent or guardian information, school information, media releases, travel information, payment information, tax information, or other information necessary to administer the activity.
Where appropriate, BRI provides additional program terms, privacy notices, releases, or authorizations describing how that information will be collected, used, retained, and disclosed.
Separate Authorizations
Participation in a BRI program or submission of student materials does not by itself authorize their use for publicity, promotion, or independent reuse by partners. Before using or sharing Student Data for these purposes, BRI obtains a separate written authorization, signed electronically or otherwise, by the student and/or the student’s parent or legal guardian, as applicable.
The authorization identifies the information or materials covered, the permitted uses, and any authorized third-party recipients. Uses of LEA Student Data must also comply with applicable school agreements and legal requirements.
Data Security
BRI maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction.
Safeguards may include access controls, authentication controls, encryption or other protections where appropriate, monitoring, security procedures, and vendor-management practices.
Access to nonpublic student information is limited according to authorized purpose and job responsibilities. BRI also requires appropriate privacy and security protections from service providers that process student information on BRI's behalf.
No information system can be guaranteed to be completely secure.
Authentication and Third-Party Security
BRI uses Auth0 to support authentication for designated BRI services.
BRI also uses service providers that maintain their own independent security certifications, attestations, and controls. Information about a service provider's certifications relates to that provider and does not substitute for BRI's own security program.
Parent, Student, and User Privacy Requests
Individuals may contact BRI to request access to, correction of, or deletion of personal information associated with them.
Parents or legal guardians may make appropriate requests concerning information associated with a minor child.
BRI will respond to requests as required by applicable law and may need to verify the identity or authority of the person making the request.
BRI retains Student Data only as long as reasonably needed for the purposes for which it was collected or to meet applicable legal or contractual requirements. When information is no longer needed, BRI takes reasonable steps to securely delete or anonymize it. Additional retention information is available in our Privacy Policy.
Additional rights may apply under particular program terms, school agreements, or applicable privacy laws.
If you need to report a privacy concern or request, security concern, accessibility issue, AI concern, vendor issue, data governance request, intellectual property concern, or other compliance matter, please use BRI's dedicated reporting form.
BRI Privacy Policy
Looking for our complete Privacy Policy?
BRI's Privacy Policy contains additional information concerning general website visitors, cookies, analytics, advertising technologies, communications and marketing choices, employment applicants, retention practices, and other privacy matters.
Contact BRI About Privacy
Questions about this page or requests concerning personal information may be submitted to BRI by email at info@billofrightsinstitute.org or by mail at:
c/o Website Queries
1310 North Courthouse Road
Suite 620
Arlington, VA 22201