Depending on how school Learning Management Systems (LMS) are set up – as privately operated systems, as a paid cloud service, or via free online services – the problem of student privacy is likely to arise. Ideally, deploying secure LMS systems is the best way to protect student privacy. However, in managing a secure LMS service, schools must be equipped with highly skilled system administrators. Most schools do not have staff with such technical skills and therefore outsource this type of work to third-party companies. While this leaves the school administration free of the management challenges of such a system, there is a greater risk that student information could be open to abuse.
Online services may also be less secure than they first appear. We know that these paid and so-called free service companies have ever increasing access to student data. These companies could use or sell the student information for marketing research or advertising purposes and parents are usually not aware that this is happening. Additionally, there have been incidences of online phishing and hacking.
Given these circumstances, we need to act. We are starting to see some academics and privacy experts sound an alarm on privacy issues. But more needs to be done. Specifically, there is a need to protect student rights and raise awareness of those LMS services, which may compromise the privacy of students.
What is needed are real reforms that would require schools to inform students and parents about third parties which may have access to student data. In addition, service-providing companies and schools should be required to gain parental consent before manipulating student data outside the functions of the service provided.
This would be the first step in protecting the privacy of students from misuse. Student online learning activities and email correspondence should not be available to anyone other than parents or teachers, and organisations to whom parents grant permission.
As technology’s role in our lives becomes more pervasive, we tend to focus on its positive aspects. But we also need to consider the risks – and among these is the way in which our privacy is being chipped away. It is up to parents, guardians and educators to be aware of this issue and for government officials to find ways to grant students the online privacy protection they deserve.
Dr Sukumal Kitisin, PhD, is an assistant professor at the Computer Science Department, Faculty of Science, Kasetsart University, Bang Kaen campus. Sukumal has served as an adviser and committee member of various ICT-related programmes including the 7th Asian Internet Engineering Conference (2011 AINTEC).