4.2 Student Data, Privacy & Records Confidentiality

4.2 Student Data, Privacy & Records Confidentiality

[!IMPORTANT] The instructor is a records custodian. WAC 308-108-120(3) assigns the record-maintenance duty to "driver training school owners and instructors," and WAC 308-108-120(3)(e) requires the name and signature of the instructor who provided each session. Instructor Standard 1.2 (Data Management) then adds the professional obligations that sit on top of the rule.

---

What Instructor Standard 1.2 requires

The standard lists six competencies:

1. Protect student information in accordance with privacy laws.
2. Implement secure data management practices to safeguard sensitive information.
3. Apply principles of confidentiality in all aspects of record handling.
4. Keep accurate and up-to-date records of student performance.
5. Organise and store records securely for easy access and retrieval.
6. Identify required documents and their retention periods.

Competency 6 is the one candidates most often fail, because Washington's retention periods are not uniform. The table below is the answer to that competency.

What the school actually holds

The record contents required by rule and statute add up to a sensitive dataset:

• name, address and telephone number - RCW 46.82.360(8)(a);
• instruction permit or driver licence number - RCW 46.82.360(8)(a);
• date of birth, where used in the monthly enrollment report - WAC 308-108-140(1)(c)(iii);
• the identifying number of the traffic safety education certificate reserved for the student - WAC 308-108-140(1)(c)(iii);
• attendance, session-by-session dates and times, progress and time involvement - WAC 308-108-120(3)(a)-(c);
• performance evaluation results for classroom and behind-the-wheel work - WAC 308-108-120(3)(d);
• parent acknowledgement of intermediate licence information - WAC 308-108-120(3)(f);
• collision or injury reports - WAC 308-108-120(5)(c).

Two categories deserve special handling. Permit and licence numbers are identity credentials useful for fraud. And any medical or accommodation information a family discloses so the school can adapt instruction - a seizure history, an anxiety diagnosis, an individualised education programme - is health information that should be recorded only to the extent needed to deliver the accommodation, and shared only with staff who need it to teach the student safely.

---

Storage, access and production

WAC 308-108-130(2): "Records shall be housed electronically or via hard copy and made available for inspection within two business days following a request for review by the department."

That single sentence sets three practical requirements:

• Either medium is acceptable, so a paper-based school is not out of compliance for being paper-based.
• Records must be findable. Two business days is not long if files are scattered across an instructor's car, a home office and a shared drive.
• Records must be at the established place of business. RCW 46.82.360(8) requires the school to maintain student, instructor, vehicle, insurance and operating records "at its established place of business," and WAC 308-108-110(2)(a) says the same for vehicle records.

WAC 308-108-120(11) sets the audit horizon: student records are subject to department audit and inspection "anytime after 90 days of the school's initial licensing, or as soon as practicable for the department."

WAC 308-108-120(1) adds a disclosure duty pointing the other way: the school's licence and all instructor certificates must be posted conspicuously before engaging students, and "an additional electronic copy will be provided to school customers, upon request." Customers are entitled to see the credentials of the people teaching them.

Practical safeguards for a small school

Most Washington driving schools are small businesses without a compliance department. These controls are proportionate and map onto Standard 1.2.

Minimise. Collect what the rules require and what the lesson needs. Do not photocopy an entire birth certificate when the permit number and date of birth are the fields the rules name.

Separate. Keep sensitive identifiers and any accommodation notes in a controlled part of the file rather than in a general roster instructors carry to the car. A drive log left on a dashboard should not expose a licence number.

Control access by role. An instructor needs the students they teach; an office administrator needs enrollment and billing; a part-time weekend instructor does not need historical files. Standard 1.2 asks for "secure data management practices," and role-based access is the cheapest version of that.

Protect data in transit. In-car tablets and phones travel; devices should be locked, and files that contain identifiers should not sit in personal accounts or unencrypted cloud folders. Note that WAC 308-108-165 independently restricts personal electronic device use during instruction, so a personal phone should not be the record-keeping tool during a drive in any case.

Retain and then dispose. The retention periods above are minimums for keeping records, not licences to keep them forever. Once the period has run and there is no live dispute or audit, dispose securely - shred paper and wipe electronic copies - rather than leaving identity data in storage indefinitely.

Log disclosures. If a record is released to a parent, a law-enforcement agency or DOL, note what was released, to whom and when. Standard 1.2's confidentiality principle is easier to demonstrate with a log than to assert after the fact.

Two events that move records

Sale or transfer. WAC 308-108-120(6): "Upon the sale or other transfer of a school by its owner, the school and student records shall be transferred to the new owner and become the property and responsibility of the new owner." RCW 46.82.360(8)(d) says the same. Records do not stay with the outgoing owner, and they are not the outgoing owner's to dispose of.

Closure. WAC 308-108-120(7): the owner "must notify the department within 30 days of closing the school and submit all unused traffic safety certificates and student course completion reports to the department." Blank certificates are controlled stock - they are the instrument by which a teenager proves course completion - and returning them prevents fraudulent issue after the school is gone.

[!WARNING] Exam traps in this section

• Retention is not uniform: vehicle records 5 years, everything else 3 years.
• Two business days to produce records on request.
• 90 days after initial licensing before student records become auditable.
• Records follow the school on sale and become the new owner's responsibility.
• Unused certificates go back to DOL within 30 days of closure.