This FAQ is for speech-language pathologists, occupational therapists, intervention specialists and others serving students with special needs subject to Section 504 or IDEA.
Boom Learning does not certify HIPAA compliance and does not offer Business Associate Agreements at this time. This does not mean using Boom Learning is forbidden to your practice. Keep reading for how to do it right.
Boom Learning certifies FERPA, COPPA, GDPR, and CCPA compliance and signs a variety of student data security agreements. Because Boom Learning is in compliance with New York Section 2d, Boom Learning satisfies the requirements of the HIPAA Security Rule.
It is possible to use Boom Cards with intervention students in a variety of ways that do not result in the collection of protected health record information.
We recommend that intervention specialists who plan to use Boom Learning watch this video on therapy best practices. The methods described in this video do not result in the generation and collection within Boom Learning of protected health record information.
Should you choose to assign decks, you may need to take extra steps to avoid disclosing that a student is under treatment with you. Here are the steps you need to take to make sure your students cannot see who else you serve.
First, students do not have access to each other's progress data. Only teacher accounts can see all student data.
But, the default when a New Classroom is created, its roster is "Not Private" and all students in the Classroom can see the full roster when they Sign out. To change this, click "Not Private" and change the Classroom to "Private". When a classroom is marked Private, when a student logs out, they will not see the classroom list. We do not provide a classroom URL for private classrooms. You should NEVER distribute the classroom username or password for a Private classroom as anyone logging in with that information can see the full roster.
You will need to create student accounts for a private classroom and hand out username/passwords. An additional privacy hygiene step you should take is to individualize passwords (Print Roster/QR will do this for you).