Student Privacy & Data Compliance
The Bill of Rights Institute is committed to protecting the privacy and security of students, educators, and other participants in our educational programs. This page explains how BRI collects, uses, protects, and shares information associated with student and educator accounts, programs, contests, events, and other educational activities.
BRI may provide additional privacy notices, terms, releases, or authorizations for particular programs or activities where additional information is required.
Student and Educator Privacy at BRI
BRI provides educational resources, accounts, programs, contests, events, and other opportunities for students and educators. The information BRI collects depends on how an individual chooses to interact with BRI.
Not every category of information described on this page is collected from every user. BRI seeks to limit the collection and use of personal information to information reasonably necessary to provide, administer, secure, and improve its educational resources, accounts, programs, and activities.
Our Student Privacy Commitments
BRI applies additional protections when personal information relates to students and minors. Depending on the account, program, contest, event, or activity, BRI may require age verification, parent or guardian consent, acknowledgments, media releases, or other authorizations.
Limited Collection
BRI seeks to collect only information reasonably necessary to provide educational resources, accounts, programs, contests, events, awards, and related services.
Appropriate Use
Student Personal Information is used to administer BRI educational activities and for reasonably related operational purposes such as security, support, legal compliance, and program evaluation.
Limited Access
Access to nonpublic student information is limited according to authorized purpose and job responsibilities.
No Sale of Student Data
BRI does not sell Student Data or provide Student Data to third parties for their independent advertising, marketing, solicitation, or profiling purposes.
Personal information BRI collects from or about an individual in connection with that individual's participation as a student in a BRI account, program, competition, event, or other educational activity.
Personal information or education records provided to or made available to BRI by or on behalf of a school or educational agency under an applicable student data privacy agreement or other applicable agreement.
Information We Collect for Student and Educator Accounts and Programs
Depending on how an individual interacts with BRI, we may collect the following categories of information. Not every category is collected from every user.
Additional information may be collected for particular programs, contests, events, travel, awards, or payments as described in the applicable program terms, privacy notice, release, or authorization.
Student and Educator Information at a Glance
| Information Category | Educators | Students | Typical Use |
|---|---|---|---|
| Account Information | Name and email address | Name and email address | Create and manage accounts; authenticate users; communicate about account activity |
| Authentication Information | Credentials and technical identifiers used to authenticate and maintain an account | Credentials and technical identifiers used to authenticate and maintain an account | Secure accounts, authenticate users, and maintain account access |
| Age or Eligibility Information | Generally not required except where relevant to a particular activity | Birthdate, age, or other age-verification information when required | Verify age or program eligibility and apply appropriate protections for minors |
| Educational Affiliation | School, organization, role, grade or subject areas, or professional information | School or educational affiliation when needed for a program | Provide relevant resources, administer programs, and verify eligibility |
| Contact or Fulfillment Information | Mailing address when materials are requested | Mailing or school address when needed to deliver program materials or awards | Deliver requested materials, prizes, or program resources |
| Program Information | Applications, participation information, surveys, communications, or supporting-teacher information | Applications, submissions, participation records, projects, communications, or program responses | Administer contests, programs, events, judging, and participation |
| Authorization Information | As applicable | Parent or guardian consent, acknowledgments, media authorizations, or other required permissions | Document participation and permissions for minors or particular activities |
| Payment or Tax Information | When payment is required | When a student receives a stipend, prize, reimbursement, or other payment | Process payments and satisfy tax, accounting, and legal requirements |
Program-specific information may be collected where necessary for a particular contest, event, advisory council, scholarship, travel activity, award, or other student program. Where appropriate, BRI provides additional terms, privacy notices, releases, or authorizations describing those practices.
How We Use Student and Educator Information
BRI uses personal information primarily to provide and administer the educational resources, accounts, programs, events, contests, and other activities requested by users.
This may include authenticating accounts, communicating with participants, reviewing applications or submissions, determining eligibility, providing resources, administering awards or payments, and supporting participation.
BRI may also use information for reasonably related operational purposes, including security, fraud prevention, accessibility, technical support, legal compliance, recordkeeping, program evaluation, internal analytics, and improvement of BRI's educational resources and services.
BRI does not use Student Personal Information for materially unrelated independent advertising, marketing, solicitation, or commercial purposes.
Service Providers and Limited Disclosures
-
Service Providers
BRI uses service providers to help operate our websites, systems,
programs, and organizational activities. These providers may process
personal information on BRI's behalf for functions such as hosting,
authentication, communications, data storage, security, analytics,
payment processing, accessibility, program administration, and
technical support.
BRI requires service providers to process personal information only for authorized purposes and subject to appropriate confidentiality, security, use, and retention restrictions. -
Program Administration and Authorized Activities
BRI may provide limited personal information to individuals or
organizations where reasonably necessary to administer a BRI program
or carry out a use that an individual has authorized.
For example, authorized judges may receive materials necessary to evaluate a contest submission, or a service or event partner may receive information necessary to support a particular BRI activity.
BRI limits such disclosures to information reasonably necessary for the authorized purpose. -
Independent Third-Party Uses
BRI does not sell Student Data and does not provide Student Data to
third parties for their independent advertising, marketing,
solicitation, or profiling purposes.
BRI will not permit a third party to use Student Data for its own unrelated commercial purposes merely because the third party provides services to, partners with, funds, or otherwise works with BRI.
Where BRI proposes to disclose personal information for a materially different purpose that requires additional notice, consent, or authorization, BRI will obtain such authorization as required by applicable law.
School Relationships and Education Records
BRI may provide educational services directly to schools, school districts, educational agencies, teachers, or other educational organizations.
Where a school or educational agency provides student information or education records to BRI under an applicable agreement, BRI handles that information in accordance with the applicable agreement, applicable law, and the purposes for which the information was provided.
Contractual requirements governing LEA Student Data may provide protections, retention requirements, deletion requirements, or other obligations in addition to those described on this page.
Programs, Contests, and Additional Privacy Notices
Some BRI programs, contests, events, advisory councils, scholarships, travel activities, awards, and other educational opportunities require information beyond what is ordinarily collected for a BRI account.
Depending on the activity, BRI may collect applications, student submissions, parent or guardian information, school information, media releases, travel information, payment information, tax information, or other information necessary to administer the activity.
Where appropriate, BRI provides additional program terms, privacy notices, releases, or authorizations describing how that information will be collected, used, retained, and disclosed.
Data Security
BRI maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction.
Safeguards may include access controls, authentication controls, encryption or other protections where appropriate, monitoring, security procedures, and vendor-management practices.
Access to nonpublic student information is limited according to authorized purpose and job responsibilities. BRI also requires appropriate privacy and security protections from service providers that process student information on BRI's behalf.
No information system can be guaranteed to be completely secure.
Authentication and Third-Party Security
BRI uses Auth0 to support authentication for designated BRI services.
BRI also uses service providers that maintain their own independent security certifications, attestations, and controls. Information about a service provider's certifications relates to that provider and does not substitute for BRI's own security program.
Parent, Student, and User Privacy Requests
Individuals may contact BRI to request access to, correction of, or deletion of personal information associated with them.
Parents or legal guardians may make appropriate requests concerning information associated with a minor child.
BRI will respond to requests as required by applicable law and may need to verify the identity or authority of the person making the request.
Certain information may be retained where reasonably necessary or permitted by law for purposes such as legal compliance, security, payment and tax administration, recordkeeping, program integrity, dispute resolution, or documentation of consents and authorizations.
Additional rights may apply under particular program terms, school agreements, or applicable privacy laws.
If you need to report a privacy concern or request, security concern, accessibility issue, AI concern, vendor issue, data governance request, intellectual property concern, or other compliance matter, please use BRI's dedicated reporting form.
BRI Privacy Policy
Looking for our complete Privacy Policy?
BRI's Privacy Policy contains additional information concerning general website visitors, cookies, analytics, advertising technologies, communications and marketing choices, employment applicants, retention practices, and other privacy matters.
Contact BRI About Privacy
Questions about this page or requests concerning personal information may be submitted to BRI by email at info@billofrightsinstitute.org or by mail at:
c/o Website Queries
1310 North Courthouse Road
Suite 620
Arlington, VA 22201