The GDPR was approved by the EU Parliament on April 14, 2016. Its enforcement date starts May 25, 2018 - at which time those organizations in non-compliance may face heavy fines.
The EU General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC and was designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organizations across the region approach data privacy. The key articles of the GDPR, as well as information on its business impact, can be found at https://gdpr.eu/
While the EU GDPR does not apply to US organizations, SchoolStatus still considers user privacy and its protection as a top priority. As such, we issue the following statement:
SchoolStatus places top-priority on the privacy of our users and the visitors using our websites. In some cases, SchoolStatus does maintain a database of “personal data” identifiers of an individual, notably first name, last name, and email address. This information is used for our users to log into and manage their website. We do not store any other personally identifiable information. Our systems are built on Amazon Web Services (AWS) and our user logins use SSL and a minimum of 128-bit encryption (most modern browsers will use 256-bit encryption). The passwords we store use the "salt and hash" method, which is the industry standard in storing passwords. Salted and hashed passwords are virtually impossible to crack.