Illinois SOPPA

When an Illinois public school or district uses Accrue ABA for student fieldwork, supervision, or clinical program tracking, Accrue ABA is acting as an operator under SOPPA. We collect and process student information only for K-12 school purposes and only at the direction of the school or district.

The categories of covered information we may process on a school's behalf are limited to what is necessary to deliver the service:

• Student initials and, where the school chooses, full name, date of birth, grade, school, and teacher.
• Program data such as goals, behavior definitions, session notes, and trial-by-trial data.
• Supervision and fieldwork records for trainees and RBTs assigned to the student.
• Guardian consent records and audit log entries documenting who accessed or changed a record.

Schools can enable minimal-identifier mode so that full names, dates of birth, and diagnosis fields are hidden across the workspace.

• We do not engage in targeted advertising to students based on covered information.
• We do not amass profiles about students for purposes unrelated to K-12 school purposes.
• We do not sell or rent student information.
• We do not disclose covered information except as necessary to operate the service or as required by law.

Before a school transfers student data to Accrue ABA, we provide a SOPPA Data Privacy Agreement that includes the categories of data covered, the service provided, our FERPA school-official status, breach cost allocation, data deletion/transfer terms, and public-posting language required by SOPPA. Organization administrators can view, print, and sign the agreement from the organization settings screen.

SOPPA gives parents and eligible students the right to inspect, request a copy of, and request corrections to covered information. Accrue ABA provides tools for school administrators to receive, track, and fulfill those requests within the timelines SOPPA requires. Parents should submit requests to the school or district that maintains the record; the school then uses Accrue ABA's export and correction tools to respond.

If Accrue ABA determines that a breach of covered information has occurred, we will notify the school or district within the time required by SOPPA. We also provide an incident workflow in organization settings so schools can document the breach, track notification deadlines, and generate parent notification content.

A current list of subprocessors is maintained on our Subprocessors page. Schools can request the annual disclosure required by SOPPA through organization settings.

For SOPPA, procurement, or school-privacy questions, contact your organization administrator or reach us through the support channel listed in our Terms & Conditions.