By now, you may have a few teachers experimenting with AI and a few leaders curious about it. That is a good sign. It also means it is the right time to set some simple ground rules, before a well meaning shortcut turns into a privacy problem.
You do not need a legal degree or a hundred page policy. You need a short list that everyone understands. Here is one to start with.
- Know what counts as protected student information. It is more than names and grades. Student ID numbers, discipline records, health notes, learning plans, attendance, and even photos can all be sensitive. So can details that seem harmless alone but identify a child when combined, like a rare medical condition plus a grade level.
- Know whether FERPA applies to you, then act as if it does. FERPA is the federal law that protects student education records, and it applies to schools that receive certain federal funds. Many charter schools are covered, while some private schools are not. Either way, families trust you with their children's information, and following the same standard protects that trust. Schools serving children under 13 should also keep a related law, COPPA, in mind when students use online tools.
- Take the names out before you paste. This is the easiest habit to build and the most protective. Replace names with placeholders like [Student A] and add the real details back after you copy the answer out of the AI tool. If a task truly needs real student information, it should not go into a free public tool.
- Choose approved tools, not whatever is free. Free tools often keep what you type and may use it to improve their products. Education or business versions usually offer stronger protections, including promises not to train on your data. Before a tool is used with anything sensitive, read how it stores data, how long it keeps it, and how you can delete it.
- A human always has the final say. AI can sound sure of itself and still be wrong. Teachers and leaders should read every output before it reaches a student or a family. And decisions about grades, discipline, admissions, or support services should never be handed to AI. It can help you think. It should not decide.
- Put your expectations in writing, and keep them short. A one page AI use guide is enough. Say which tools are approved, what information stays out, how students may use AI for schoolwork, and who to ask when someone is unsure. Review it every year, because the tools will keep changing.
- Train your people and talk with families. A rule nobody knows about does not protect anyone. Walk your staff through the guide, and give them a safe space to ask questions without feeling embarrassed. Then let families know how your school uses AI and how you protect their children's information. Transparency builds more confidence than silence ever will. Since state and federal rules in this area keep evolving, it is wise to check which requirements apply to your type of school.
Where to go from here
If this list feels like a lot, start with three things this month: pick your approved tools, write the one page guide, and hold one short staff conversation. That alone puts you ahead of many schools.
If you would like a second set of eyes, we are happy to help. IT for Education has worked exclusively with K through 12 schools since 2002, and we help leaders bring in new technology without adding risk or stress. A Technology Readiness Review gives you a clear picture of your tools, your security, and your next steps. If you would rather start with a conversation, you can book a Discovery Meeting.
