DPO Download

In this episode our hosts welcome Melissa Boucher, Manager of the E-Learning Team at NERIC (Capital Region BOCES). The conversation explores the rapidly evolving role of artificial intelligence in K–12 education, moving beyond basic administrative uses to innovative classroom applications like AI-driven interactive learning. Boucher addresses critical data privacy and security considerations, highlighting the risks of sensitive data exposure—such as students sharing personal information with AI companion bots like Character.AI. Emphasizing that school Data Protection Officers (DPOs) cannot navigate these challenges in isolation, she advocates for district-wide AI literacy, joint administrative committees, role-specific professional development, and collaborative approaches that foster safe, human-centered technology integration for teachers, students, and parents.

In this episode of The DPO Download, our hosts welcome risk advisors Nick Spencer and Scott Garcia from Smith Brothers Insurance to discuss the evolving landscape of cyber security insurance in K-12 school districts. The panel explores how cyber threats have shifted from simple data theft to sophisticated extortion schemes. The guests detail the critical shift from standard policy add-ons to dedicated, standalone cyber coverage, highlighting the core security controls underwriters require today—such as multi-factor authentication (MFA), data encryption, patch management, EDR, and air-gapped backups. Additionally, they examine common policy limitations like sub-limits and exclusions, offer practical advice on policy reviews and third-party vendor management, and share real-world anecdotes that underscore the importance of proactive risk management in education.

In this episode of The DPO Download, our hosts are joined by RIC One DPSS team members Ashleen Speen and Keith Schubert to unpack a major shift in New York State Ed Law 2-D compliance: the transition from the NIST Cybersecurity Framework 1.1 to version 2.0. Together, the panel explores how NIST 2.0 brings governance to the forefront of district leadership and how the team developed new, tiered community profiles (Critical, Core, and Comprehensive). Our guests highlight the collaborative effort behind RIC One’s newly released gap assessment and reporting tool, while sharing practical strategies for prioritizing risk, tracking evidence, and building long-term cybersecurity maturity—reminding listeners that when it comes to data privacy, no district has to go it alone.

Our hosts share key takeaways for school districts from the 2026 New York State Cybersecurity Conference. Listen in as they dive into new developments in AI prompting, data privacy, and the growing trend of educators "vibe coding" applications for their classrooms. Finally, learn about the critical privacy concerns all School District Data Protection Officers should consider when addressing staff members and AI-generated code.

On this episode our hosts revisit a interview with Hilary Hofstein, Managing Program Coordinator for Health, Safety, and Risk at Capital Region BOCES on the Cybersecurity Annex a component of school districts' Building Level Emergency Response Plans in New York. Hofstein provides a deep dive into the annex, describing it as a vital "cheat sheet" or quick guide that outlines essential protocols and key personnel for digital crises. Our hosts also address the newest developments in AI-driven phishing techniques—such as "device control flow" attacks—currently targeting New York schools.

With the Cybersecurity Annex now a mandated component of school districts' Building Level Emergency Response Plans in New York, this episode revisits a timely interview with Hilary Hofstein, Managing Program Coordinator for Health, Safety, and Risk at Capital Region BOCES. Hofstein provides a deep dive into the annex, describing it as a vital "cheat sheet" or quick guide that outlines essential protocols and key personnel for digital crises. Beyond the mandate, our hosts address the newest developments in AI-driven phishing techniques—such as "device control flow" attacks—currently targeting New York schools.

Join our hosts live at the 2026 RIC one Data Privacy and Security Conference. Listen as we hit the conference floor to catch up with district leaders and IT experts, diving deep into the breakthrough insights and "aha" moments they’re taking back to their schools.

In this episode of the DPO Download our hosts speak with Eric Coronado, Director of Technology for the Suffern Central School District, to explore how his district is embracing cutting-edge technological initiatives. Eric shares how his team proactively addressed the rapid rise of artificial intelligence by collaborating with teachers to create a "green, yellow, and red light" framework for AI tools, ensuring a delicate balance between classroom innovation and strict student data privacy. Additionally, he details the launch of a pioneering three-year cybersecurity academy at Suffern High School.

In this episode, our hosts sit down with leadership from the Burnt Hills-Ballston Lake Central School District—Superintendent Patrick McGrath, Director of Technology Doug Carlton, and Assistant Director of Technology Michael Steinberg. They discuss the district’s strategic shift toward a unified vernacular across departments, a move that enabled the implementation of automated user provisioning reaching all the way to the physical security layer.

Listen as we explore how the district successfully leveraged administrative regulations and a culture of shared decision-making to streamline onboarding processes. By reducing IT overhead and enhancing data privacy in alignment with NIST 2.0 standards, this team provides a roadmap for modernizing school district operations.

On this episode we welcome former Chief Information Officer at Pittsford Central School District Dr. Jeff Cimmerer to the podcast. Listen as Dr. Cimmerer speaks about how cybersecurity is very much a team sport. Learn how using common nomenclature can help reach a variety of stakeholders within your district.