Is digital signage safe for student data? FERPA, CIPA and privacy
Quick answer: DigitalSignage.com signage is safe for student data when the school follows one rule: no student personal information goes on a public screen, and a student's name or photo appears only with consent. A standard signage player shows content and reports its own status; it has no camera and does not identify viewers, so a hallway screen collects nothing from students walking past. DigitalSignage.com's website and SignStudio set no advertising trackers, and screens show no third-party ads on any plan, including the free plan (first 3 screens free forever, then $3 per screen per month). FERPA, CIPA and COPPA are named below; check their application with district counsel.
Last updated October 22, 2026. Product facts from our schools guide, security best practices and SignStudio user management documentation. Legal references are by name only; this page is not legal advice.
What a signage screen collects, and what it does not
The privacy question about signage is usually asked the wrong way round. A screen is an output. The DigitalSignage.com SignPlayer downloads the content assigned to it and reports its own status to SignStudio: online or offline, last check-in, what it is playing, storage and version. It has no record of who stood in front of it: no camera, no face detection and no audience measurement in a standard deployment; our audience analytics page describes optional sensors a school would have to add on purpose. Screens on DigitalSignage.com show no third-party ads and no watermark on any plan, and the DigitalSignage.com website and SignStudio set no advertising trackers.
So the data at risk is not collected by the screen. It is what staff put on the screen, and who has the login to do so.
What never goes on a public screen
| Never | Why | Instead |
|---|---|---|
| Full names with grades, scores or class rank | Education records | Recognition by first name and last initial with consent, or by team and achievement |
| Attendance, discipline, health or counseling information | Education records and health information | Nothing; this is office business |
| Student ID numbers, schedules, lunch balances | Identifiers that enable impersonation | Nothing on hallway screens; the student portal handles it |
| Photos of students without consent | Publication requires permission | A consent column in the content sheet, checked before every row |
| Birthday lists with dates | Identifiers; also a policy decision | First names only, if district policy allows at all |
| Home addresses, parent names, phone numbers | Directory information with opt-out rights | Nothing |
| Login screens, dashboards, email on a visible display | Exposes other students' data to the hallway | Keep staff screens in staff areas |
Our schools guide puts it as policy: keep student personal information off public screens unless district policy allows it, treat honor rolls and birthday lists as a policy decision rather than a default, and get consent before a student's photo appears.
Consent for names and photos
- Use the district's existing media release; do not invent a signage-specific form without counsel.
- Record consent where the content lives. If the hall of fame or the recognition slides come from a Google Sheet that SignStudio reads, add a consent column and make an empty cell a hard stop.
- Respect withdrawals: a student or parent who opts out must come off the screen on the next refresh, and off the archive.
- Treat photos from events the same as names: a crowd shot at a game is one thing, a close-up with a caption is another.
The laws, by name
- FERPA covers student education records and who may see them. A screen in a hallway is a disclosure to everyone who passes.
- CIPA concerns internet filtering on school networks. If the district's CIPA filtering applies to the signage network, keep RSS, social and web page feeds on screens to sources you control, so a filtered network does not show an unfiltered feed.
- COPPA concerns online services that collect personal information from children under 13. A signage player does not; the accounts that need protecting are the staff logins, which are personal data too.
- State student privacy laws vary and some require vendor agreements for any service that touches student data.
None of this is a clause-by-clause reading; have district counsel confirm what applies to your deployment.
The real risk: logins and screens
The data incident in school signage is almost always a person, not a player: a shared password, a former employee whose login still works, a teacher's laptop mirrored to the hallway screen with a gradebook open. Our security best practices apply:
- Multi-factor authentication on the signage account.
- Role-based access with least privilege, and separate creator and publisher roles with an approval step, which also catches a well-meant honor roll before it goes live.
- Remove users when staff leave; review the user list each term.
- Audit logs of who published what.
- Players on a dedicated VLAN with outbound-only firewall rules; SignPlayer talks over HTTPS on port 443 only, so no inbound connection to the school network is needed.
- Never show a desktop, email or a student information system on a public screen; use scenes built in SignStudio instead.
The education page notes per-department logins and an approval workflow for student content; SignStudio user management is where both are set.
Questions to ask any signage vendor
- What does the player collect about viewers? (The answer should be nothing in a standard deployment.)
- Does the service show ads or third-party content on our screens?
- Does the website or the content editor set advertising trackers?
- Where is our content stored, and can we keep it on our own server? DigitalSignage.com offers the $895 one-time mediaSERVER for districts that keep data in-house.
- Can we set roles, require approval before publishing, and see an audit log?
- How do we remove a user, and how do we delete content and close the account?
- Will you sign the district's data privacy agreement? Ask DigitalSignage.com support (support@digitalsignage.com, live chat at https://chat.digitalsignage.com/ or +1-877-344-7446) for the current documents.
- What is the retention period for content, logs and player status data once we delete or leave?
Retention
Keep screen content short-lived by design: a recognition slide for the week, a photo for the season, an archive in the district's own storage rather than on the screen service. For the signage account itself, ask support for the current retention terms for deleted content, logs and status data, and write the answer into your vendor record.
What is fine, and worth doing
Announcements, bell schedules, cafeteria menus, event calendars, team results, club meetings, weather and the emergency override (included on the free tier) involve no student data at all. Most of a school's screens never need a name on them. Recognition is worth doing, with consent, by first name and achievement.
Frequently asked questions
Does a digital signage screen collect data about students walking past?
Not in a standard deployment. The DigitalSignage.com SignPlayer downloads assigned content and reports its own status, such as online or offline and what it is playing. It has no camera, no face detection and no audience measurement unless a school adds sensors on purpose, so a hallway screen collects nothing from the students who pass it.
What student information can go on a school digital sign?
Information the school may publish, with consent where a name or photo identifies a student: team results, club news, recognition by first name and achievement. Keep grades, scores, class rank, attendance, discipline, health, ID numbers, schedules, lunch balances and contact details off public screens, and treat honor rolls and birthday lists as a policy decision rather than a default.
Is DigitalSignage.com FERPA compliant?
FERPA compliance is a property of how a school handles education records, not a badge a signage vendor carries. DigitalSignage.com helps by collecting nothing from viewers, showing no third-party ads, setting no advertising trackers on its website or in SignStudio, and providing roles, approval and audit logs. Keep student personal information off public screens and have district counsel confirm what applies.
Does CIPA apply to digital signage?
CIPA concerns internet filtering on school networks. If the district's filtering applies to the signage network, keep RSS, social and web page feeds on screens to sources you control so a filtered network never shows an unfiltered feed, and have counsel confirm your obligations.
Do we need consent to show a student's photo on a screen?
Yes, treat it as a publication and use the district's existing media release. Record consent in the sheet or list that drives the content, make an empty consent cell a hard stop, and remove a student on the next refresh if consent is withdrawn.
What should we ask a signage vendor about student privacy?
What the player collects about viewers, whether screens show third-party ads, whether the website or editor sets advertising trackers, where content is stored and whether an on-premise option exists, whether roles, approval and audit logs are available, how users and content are deleted, whether the vendor will sign the district's data privacy agreement, and what the retention period is for content, logs and status data.
Can a district keep signage content on its own server?
Yes. DigitalSignage.com's mediaSERVER is a one-time $895 on-premise license with the same editor and players, for districts whose policy keeps data in-house. The cloud service is free for the first 3 screens and $3 per screen per month after that.
Related
- Education digital signage
- Free digital signage for schools
- Security best practices
- SignStudio user management
- Data privacy and GDPR
- Digital hall of fame displays for schools
Try it on your own screens, free
DigitalSignage.com, which publishes this guide, runs a permanent free plan: the first 3 screens are free forever (no credit card, no ads, no time limit), then from $3 per screen per month with volume pricing via a public calculator. The free SignPlayer runs on Windows, Mac, Android and Android TV, Chrome OS, Raspberry Pi, iPad or any modern web browser. Start free · 2026 pricing