Student Privacy and Security

When to Use?

What personal data gets collected when taking a test that requires Respondus Lockdown Browser and Monitor.

Procedure

• Respondus complies with a variety of privacy and security standards, including FERPA, GDPR, U.S. Privacy Shield, CCPA, EDUCAUSE HECVAT Participation, PCI-Compliance Scanning, SOC 2 Type 1 Certification, and LTI.  Respondus facilitates third-party penetration testing and monthly vulnerability scanning. Respondus engineers have achieved AWS Solutions Architect Certification or higher. More information on data privacy is available from the Respondus Privacy Center.
• GVSU followed a strict process during procurement ensuring student privacy and security of the Respondus application. Further, as Respondus is licensed by over 1,100 educational institutions, the technology, security, and privacy stance has been vetted by some of the largest online learning programs in the world. In fact, Respondus Monitor proctors more than 25+ million exams per year.
• Respondus licensing terms of use, FERPA, and video retention length were reviewed by GVSU Legal, Information Technology, the Registrar, and the Office of the Provost.
• A 3rd Party Vendor Security Confidentiality of Customer Data was approved by GVSU Legal and Information Technology with a Security Addendum Signed by Respondus/Countersigned by GVSU during procurement.
• No outside sources can access the Respondus webcam recorded videos of students. Only the instructors that are enrolled in the Blackboard course can access the recordings for playback.
• The video that is captured during a Respondus Monitor session is streamed using encryption that is unique for each session to a server that only accepts streaming connections. Respondus Monitor servers only “render” the video review user interface for instructors, and the video itself is stored in a separate Amazon Web Services (AWS) server, therefore, no video is stored at Respondus.com. 
• The only way to access a Respondus video is for the instructor to authenticate through our GVSU Blackboard learning management system, and then accessing the video through the Respondus dashboard which uses a secret key that is unique to our institution.
• GVSU's license agreement with Respondus indicates that Monitor recordings will be saved for a period of “5” years before they are erased by Respondus. This time frame was agreed to by the Registrar's Office and approved by university legal counsel as part of the license agreement.

View Respondus Support page.