Data Magic Episode #6: Building Trust in EdTech: Privacy, Security, and Interoperability Together

In this episode of Data Magic, we sit down with Steve Smith, Executive Director of Access 4 Learning (A4L), to unpack the critical balance between interoperability, privacy, and security in K-12 education. Drawing on his 27 years of experience as a district CTO and CIO, Steve explains how his experiences in both rural Maine and urban Cambridge have shaped his perspective on student data, highlighting the urgent need for connected systems that also protect privacy. He introduces his “three-legged stool” framework, which encompasses interoperability, privacy, and cybersecurity, and explains why all three are essential to a secure education ecosystem. Steve also shares the origin story of the Student Data Privacy Consortium (SDPC), which now manages over 200,000 signed privacy agreements across 15,000 apps, and how it has transformed collaboration between districts and vendors. The conversation delves into new initiatives, such as the Global Education Security Standard (GESS), designed to unify cybersecurity expectations across states and countries, and Privacy Obligation Documents (PODs), which automate the communication and tracking of privacy agreements. Finally, Steve reflects on what excites him most about the future: collaboration across organizations and systems, from K-12 to higher education and the workforce, and previews upcoming convenings where this work will continue to grow. Tune in for an insider’s perspective on how schools and vendors can work together to build a trusted, secure, and connected data ecosystem for all learners.