Advanced Search
Content Type: Examples
A US federal judge has ruled in the case Ogiltree v. Cleveland State University that "room scans", the common requirement in remotely proctored exams to provide a 360-degree scan of the area in which students are taking tests, are an unreasonable search under the Fourth Amendment. Often these areas are personal residences and/or private spaces. The ruling is not binding on other courts, but any student wishing to push back against room scans can cite it.https://www.eff.org/deeplinks/2022/08/…
Content Type: Examples
The UK Information Commissioner's Office has reprimanded North Ayrshire council for installing iPayimpact facial recognition technology in nine schools without obtaining adequate consent. The system was intended to speed cashless lunch payments. The council withdrew the system and deleted the data after the ICO's ruling.
https://techmonitor.ai/policy/privacy-and-data-protection/facial-recognition-technology-school-ico
Writer: Sophia Waterfield
Publication: TechMonitor
Content Type: Examples
In a report, the UK's Digital Futures Commission warns that the explosion of use of education technology brings risks to children's privacy, especially that the data it collects, much of it personally identifiable, will be entered into the heavily commercial global data ecosystem, with uncertain consequences for the future. Although schools have returned to in-person learning, tools such as Google Classroom and Class Dojo have become permanently entrenched even though they have "opaque" privacy…
Content Type: Examples
In an unprecedented interim ruling, a student has provided sufficient facts to uphold a complaint that the Free University discriminated against her when its anti-cheating algorithm failed to log her in via face detection, likely due to the darker colour of her skin. The university has ten weeks to prove that the software did not discriminate.
https://www.mensenrechten.nl/actueel/nieuws/2022/12/09/eerste-keer-vermoeden-van-algoritmische-discriminatie-succesvol-onderbouwd
Writer:…
Content Type: Examples
A report finds that most of the education technology endorsed by 49 governments in the rush to online learning during the covid-19 pandemic puts at risk or directly violates the privacy and rights of children for purposes unrelated to their education. Such platforms track children across the internet, access their contacts lists on social media and phones, and built profiles that can be used for manipulation.
https://www.hrw.org/report/2022/05/25/how-dare-they-peep-my-private-life/childrens-…
Content Type: Examples
The pro-Ukrainian hacker group NLB Team leaked the personal data of more than 17 million children and parents who used Moscow Electronic School, an online learning platform that was built by the Moscow city government in 2016 and was its primary method of delivery online education during the covid-19 pandemic. The city government said the leaked data did not pertain to real users; however, a number of users identified their own data. Even before the leak, the platform was reportedly surveilling…
Content Type: Examples
German data protection authorities have ruled that the use of Microsoft Office 365 in schools is not compliant with GDPR, citing a lack of transparency around how and where Microsoft processes and stores student data as well as the potential for third-party access. German federal and state data protection authorities have been looking at how to improve Office 365 for two years but deems changes Microsoft has made insufficient to bring the software into compliance.
https://www.computerweekly.…
Content Type: Examples
In a report, the Center for Democracy and Technology finds that student privacy laws are insufficient to protect students in the face of increasing use of remote education technologies and insufficient staff and other resources. CDT examined the practices of 43 local education authorities and their relationships with their state education agencies in order to understand what information is transparently and proactively available to families, staff, and other stakeholders.
https://cdt.org/…
Content Type: Examples
In a report, the Privacy Coimmissioner of Canada has said that online proctoring tools used to conduct remote exams fail to get sufficiently free, clear, and individual consent from students. Besides this overreach, the report identifies factors that may trigger false alerts and errors in the biometric tools incorporated into the software. The report ends by calling for reflection on how to identify uses of AI that should be prohibited.https://www.biometricupdate.com/202211/online-proctoring-…
Content Type: Examples
The French minister of national education and youth has advised schools not to use the free versions of Microsoft Office 365 and Google Workspace because French public procurement contracts require payment. Paid versions may be allowed if they do not violate data protection rules, including a 2020 French ruling that cloud services that store data in the US are not compliant with GDPR.
https://www.theregister.com/2022/11/22/france_no_windows_google/
Writer: Thomas Claburn
Publication: The…
Content Type: Examples
In a preliminary ruling, the administrative court of Montreuil suspended the use of algorithmic e-proctoring software called TestWe after students at the Institute of Distant Study of the University of Paris 8 brought a legal case, assisted by La Quadrature du Net. The plaintiffs argued that the software failed to comply with GDPR because the software failed to comply with data minimisation standards and its visual and audio surveillance was disproportionate to the intended purpose. A final…
Content Type: Examples
A security flaw in the mandatory "Diksha" app operated by the Education Ministry, which became an important tool for giving students access to coursework while at home during the pandemic, exposed the data of millions of Indian students and teachers for more than a year when a cloud server hosted on Microsoft Azure was left unprotected. In 2022, Human Rights Watch found that Diksha was able to track students location, and shared data with Google, which indexed more than 100 files from the…
Content Type: Examples
Ohio teenager Aaron Ogletree has won a lawsuit he filed against Cleveland State University after he was required to pan a webcam around his bedroom to eliminate possible cheating before taking a remote exam.
The court agreed that Ogletree's Fourth Amendment rights were violated by the scanning requirement, which briefly exposed tax documents and medications. The university has filed an appeal and in the meantime has told students that they will not be permitted to take remotely proctored…
Content Type: Examples
US parents have reported receiving an explicit and deliberately shocking image after hackers attacked the primary school learning app Seesaw. Seesaw has 10 million users, who include teachers, students, and family members. The company said the hackers had not gained administrative access, but had accessed individual accounts via compromised email addresses and passwords that had been reused across services.
https://www.bbc.co.uk/news/technology-62914010
Writer: BBC
Publication: BBC
Content Type: Examples
At least 37 US colleges and universities, as well as numerous school district, have repurposed Social Sentinel (recently renamed Navigate360 Detect) to help campus police surveil student protests. The software is marketed as a safety tool that can scan students' social media posts and university email accounts to identify those who are at risk of harming themselves or others; adoption in schools has been fuelled by shootings. For public colleges, this use of the software creates a conflict…
Content Type: Examples
The 32-year-old Americans with Disabilities Act is failing to protect neurodivergent students from school monitoring and risk assessment software that treats any divergence from stereotypically "normal" behaviour as a harm to both the students themselves and others. Remote proctoring software penalises those who need psychological help, flag "suspicious" movements such as looking away from the screen during a test, and makes no provision for disabled students' special needs. These problems are…
Content Type: Examples
In a 2010 case, the Lower Merion school district in suburban Philadelphia school district agreed to pay $610,000 to settle two lawsuits brought by students who had discovered that the webcams attached to their school-issued laptops had secretly taken hundreds of photographs of them in their homes along with hundreds of screen shots. In one of the cases, a teenaged boy was accused of popping pills; in fact, he was eating jelly beans.
https://www.wired.com/2010/10/webcam-spy-settlement/
Writer…
Content Type: Examples
Even though schools are back in session in person, their teachers can still monitor the screens on their school-issued devices via software such as GoGuardian. In a new report from the Center for Democracy and Technology, 89% of teachers say their schools will continue to use student-monitoring software, up from 84% in 2021, raising worries about how the data will be used in a climate increasingly hostile towards abortion and LGBTQ+ issues.
CDT also reports that 44% of teachers say that at…
Content Type: Examples
A new report from the education news site The 74 Million finds that in-school digital surveillance programs are flagging LGBTQ+ content as "pornographic". For example, Gaggle, comprehensive monitoring software implemented in the Minneapolis public school system, has led administrators to notify parents that their children's submissions have been flagged, without context, for mentioning suicide, gay, and lesbian. Democratic senators Elizabeth Warren (D-MA), Ed Markey (D-MA), and Richard…
Content Type: Examples
Following the US Supreme Court's Dobbs decision that paved the way for states to enact legislation criminalising abortion, health advocates warn that the surveillance software schools use to algorithmically monitor students' messages and search terms could be weaponised against teens looking for reproductive health care. These systems can automatically alert school administrators, parents, or police when they detect "dangerous behaviour", which may include anything from imminent suicide…
Content Type: Examples
The Welsh Local Government Association is collaborating with the Centre for Digital Public Services on an 8-to-12-week discovery project to help local authorities to understand schools' requirements for information management systems and understand the market offerings in order to formulate a needs-based procurement specification. The project is intended to produce a shared set of core requirements and will look at user need for establishing one or more core datasets, individual schools'…
Content Type: Examples
During a remotely proctored online exam, a number of students on the Bar Professional Training Course urinated in bottles and buckets and wore adult diapers rather than risk the possibility that their exam would be terminated if they left their screens long enough to go to the toilet. The Bar Standards Board responded to the story by saying that students are warned in advance that they will not be able to leave the room during an online exam and that they should take the exam in a test centre…
Content Type: Examples
In September 2022, the UK Department for Education announced that under a £270,000 contract with Suffolk-based Wonde Ltd it would collect data on children's school attendance and potentially share it with other government departments and third parties as part of its drive to raise attendance. A visualisation tool will create an interactive national attendance dashboard to run alongside the publication of fortnightly attendance data that the DfE says will provide "ongoing transparency". LSE…
Content Type: Examples
Intel, in partnership with the software company Classroom Technologies, has developed an AI facial analysis system ("Class") by training an algorithmic model based on labels psychologists applied to the emotions they could detect in videos of students in real-life classrooms. The software is intended to help teachers get feedback from students in online classrooms and warn if the students are bored or confused; critics worry the system could threaten student privacy and damage teacher-student…
Content Type: Examples
Despite having opened their borders to and taking in millions of fleeing Venezuelan migrants, the Colombian government’s handling process for this population tells a story of discrimination rather than inclusion.
The 2021 issuance of the Temporary Statute for Venezuelan Migrants came with a legal framework laying out the benefits for incoming Venezuelans, but also outlined how a multibiometric system would be used for identification of this specific migrant group.
This system allows for…
Content Type: Examples
In December 2019, a Brazilian public security programme, called the Integrated Border Operations Center (CIOF) was presented. The CIOF aims to combat transnational organised crime in the region of Foz do Iguaçu and the Triple Border Area1, shared by Argentina, Brazil, and Paraguy, and integrate different public security agents through a centralised system.
It has been reported that CIOF is part of a wider digital security apparatus being deployed in the Triple Border Area, that there is…
Content Type: Examples
A vulnerability in the Bono Familiar Universal, the platform used to distribute the financial subsidy provided to households in precarious economic situation by the Peruvian government in response to the Covid-19 pandemic, enabled the subsidy to be accessed by malicious individuals.
The vulnerability was reported by Deep Security, and it was resolved but an undetermined number of malicious individuals were able to pose as beneficiaries to access the platform and collect the subsidy themselves…
Content Type: Examples
The Burkina Faso government cut off internet access across the country following protests demanding the resignation of president Roch Marc Christian Kabore. Insurgents have attacked military positions as well as gold-mining operations. A government statement said the outage was extended under a legal provision relating to national defence and public security.
https://www.bloomberg.com/news/articles/2021-11-25/burkina-faso-extends-internet-shutdown-before-nov-27-protests?sref=Hjm5biAW Internet…
Content Type: Examples
On January 5, 2022 the Kazakhstan government shut down the internet nationwide in response to widespread civil unrest after the government's removal of a price cap led liquid natural gas prices to rise sharply. Government use of a kill switch to block internet access is rising as a way of suppressing dissent and exercising social control; other examples include Iran, Sudan, Egypt, China, and Uganda. Kazakh law permits the government to temporarily suspend communications networks; much of the…
Content Type: Examples
On December 25, 2021, Sudanese security forces shot and killed four pro-democracy protesters and wounded hundreds of others who, among tens of thousands of people, defied a security lockdown and telecommunications network shutdowns to demonstrate against military rule, AFP News reports. Security forces installed new CCTV cameras on major thoroughfares in advance of the protests, which demanded a transition to a civilian government. Activists have also condemned sexual attacks on women and girls…