Researchers have identified a systemic trend in the educational technology sector where privacy protections are frequently sidelined during the initial development of software. According to a study reported by arXiv cs.AI, titled “We’ll Fix It Later,” developers and organizations often recognize the importance of privacy but fail to integrate it as a foundational design requirement. The research utilized a mixed-methods approach, combining 12 semi-structured interviews with industry professionals and a detailed audit of 48 different EdTech platforms.
The Deferral of Student Privacy
The findings highlight a significant gap between the sensitivity of the data being collected and the priority given to its protection. EdTech platforms routinely handle highly personal information, including behavioral logs, academic histories, and records regarding student disabilities. In the audit of 48 platforms, researchers coded privacy policies across five specific dimensions. The study reported a mean Cohen’s Kappa of 0.781, indicating a high level of agreement among the researchers regarding the consistency of these findings. This organizational pattern suggests that privacy is often viewed as a task to be addressed after a product has already been launched or scaled, rather than as a core feature of the initial technical architecture.
Unknowns in Platform Compliance
The reporting did not specify the names of the 48 platforms that were audited, nor did it identify the 12 professionals who participated in the interviews. Consequently, it is not clear which specific market leaders or niche tools are most responsible for these privacy deferrals. The study also did not list the specific five dimensions used to code the privacy policies, nor did it provide a breakdown of how individual platforms performed against one another. Furthermore, the announcement did not clarify if these platforms are currently in compliance with existing legal frameworks, such as the Family Educational Rights and Privacy Act (FERPA) or the Children’s Online Privacy Protection Rule (COPPA).
This research suggests that a “fix it later” mentality remains a standard operating procedure within the EdTech industry. As AI integration increases in classrooms, the risks associated with deferred privacy measures may become more difficult to rectify.
Lead image: Julia M Cameron / Pexels
