New York Codes, Rules and Regulations
Title 8 - EDUCATION DEPARTMENT
Chapter II - Regulations of the Commissioner
Subchapter E - Elementary and Secondary Education
Part 121 - Strengthening Data Privacy and Security in NY State Educational Agencies to Protect Personally Identifiable Information
Section 121.8 - Educational Agency Data Protection Officer

(a) Each educational agency shall designate a Data Protection Officer to be responsible for the implementation of the policies and procedures required in Education Law § 2-d and this Part, and to serve as the point of contact for data security and privacy for the educational agency.

(b) Data Protection Officers must have the appropriate knowledge, training and experience to administer the functions described in this Part.

(c) A current employee of an educational agency may perform this function in addition to other job responsibilities.