Page 117 - School Bus Operators and Attendants Handbook

POLICIES

employees, for training purposes only, to enhance their security awareness. An example is a mock
phishing and malware threat email.

8. Cloud Computing - Use of non-District approved cloud services is prohibited. The Student
Information Contract/Agreement Addendum form, PBSD 2220,
(http://www.palmbeachschools.org/Forms/Documents/2220.pdf) shall be used when any contract for
cloud services includes vendors receiving confidential student information, including personally
identifiable information. Cloud service contract agreements must directly address privacy obligations and
these vendors must comply with the requirements of the Family Educational Rights and Privacy Act
(FERPA), the Protection of Pupil Rights Amendment (PPRA), and the Children’s Online Privacy Protection
Act (COPPA). Vendors shall not allow the use of student data for any purpose other than as stated in the
contract with the District. District contracts with these vendors shall contain this restriction.

9. An employee may utilize District technology resources outside of the employee's paid duty hours to
use the Internet for the employee's personal and professional growth provided no additional costs
are incurred to the District, the District's Internet and network resources are not negatively
impacted, and firewall and network configurations are not altered to allow different services that are
not usually allowed during the employee's paid duty hours.

This provision is not intended to restrict or limit an employee's ability to utilize District technology
during the employee's paid duty hours for professional development when the professional
development is related to the employee's responsibilities for the District, certification, or license,
such as District or professional organization training vodcasts, webinars, or online presentations
related to one's duties.

Employees are encouraged to use these facilities for personal and professional growth, which must
not be confused with financial gain, and engaging in activities seeking financial gain is prohibited.
Examples of "financial gain" include offering products or services for sale and soliciting for an
advertiser or sponsor for the benefit of any enterprise other than the District.

10. Cellular Devices -- Consistent with the goal of expending public funds in the most economical
manner, the following standards shall apply to use of District-issued cellular devices, which include
but are not limited to cellular/smart phones, air cards/hot spots, and any other portable
communications devices that can transmit voice and/or cellular data signals through wireless
technology, all of which are referred to in this Policy as "cellular devices":

a. The accounting for all cellular devices in the District shall be consistent with and follow the
most current IRS rulings.

b. District employees will limit cell phone usage; whenever possible, calls will be made on a
conventional landline telephone if one is reasonably available. Employees should be aware
that when using cellular devices they are subject to outsider's viewing or hearing the
communications through spyware.

Page 116 of 149
APPENDIX