Pursuant to Education Law section 2-d, BOCES and school districts are now required to publish, on their websites, a Parents’ Bill of Rights for Data Privacy and Security and to include such information with every contract entered into with a third party contractor where the third party contractor receives student data or teacher or principal data.