Gov. Polis and CDPHE Conspire to Violate FERPA for Illegal Student Surveillance

In this essay Gov. Polis and CDPHE Conspire to Violate FERPA for Illegal Student Surveillance, author, West Point graduate and former Captain in the Army Medical Service Corps Pam Long explains the prior attempts and current attempt of the Colorado Department of Health and Environment (CDPHE) in its long term, incremental plan to obtain citizen’s personally identifying data (PII) under the guise of “health and safety” to strong arm vaccine uptake.
Kim Monson Featured Articles
Kim Monson Featured Articles
Gov. Polis and CDPHE Conspire to Violate FERPA for Illegal Student Surveillance
/

As a decade-long watchdog of CDPHE, the most corrupt state agency in Colorado, this article intends to update the public on the prior attempts and current attempt of this rogue agency in its long term, incremental plan to obtain citizen’s personally identifying data (PII) under the guise of “health and safety” to strong arm vaccine uptake. The Family Educational Rights and Privacy Act (FERPA) of 1974, has been the unyielding obstacle of this rogue agency. CDPHE seeks to abolish privacy to implement a medical surveillance state, with coercive tactics triggered in the Colorado Immunization Information System (CIIS) database. Once an adult or student is included in the registry, with recently added data fields for employer and school information, CDPHE has the power to send individualized reminder notices on vaccine boosters, recall notices to quarantine, and to conduct home visits with social workers, nurses, and law enforcement. The unpublished strategic plan has always been to steal medical records, to kill medical privacy, and to destroy medical choice. This CDPHE pilot program of a public vaccine compliance dashboard currently targets students by an Executive Order of Gov. Polis, but it is aimed and ready to include all adults in Colorado, with easy additions of government and private sector reporting if it goes unchallenged in the courts.

CDPHE’s prior attempts to bypass the FERPA obstacle

Since 1978, local schools have collected immunization and exemption records for students. CDPHE data has consistently reported near 95% compliance with all recommended vaccines for school attendance, with only 2% of students utilizing exemptions for medical, religious, or philosophical reasons. The 3% unaccounted for was determined to be caused by administrative processing time or a lag in parents to turn in records at fall enrollment (“in-process” and “non-compliant”). By CDC standards, these numbers indicate vaccine program success, but it became clear to all who attended hearings at the Capitol in recent years that “zero exemptions” is CDPHE’s heavy-handed end goal.
In 2016, CDPHE attempted to become a state approval agency for vaccine exemptions in HB16-1164, Transfer Immunization Exemption Duties To CDPHE. This bill attempted to create two types of citizens: the compliant and the outcasts. The bill would maintain the local school immunization record process for students who consented to every vaccine, but brazenly created a new state approval process for any student who chose to submit an exemption for any one vaccine. The “experts” at bill hearings testified in transparency that exemptions would not actually be approved by the state. (I have actually heard doctors testify that they have NEVER and will NEVER support a vaccine exemption for any reason, thus indicating the decision is strongly influenced by ideology and not medical contraindications.). This bill died because the sponsor, Rep. Dan Pabon (D), who advocated for our “health and safety” was arrested for a DUI and caught on police video attempting to use his position to avoid arrest, after installing his legislator’s license plates on his wife’s vehicle. CDPHE continued for over a year to pretend that this bill became law and instructed schools to have parents submit vaccine exemptions to the state for approval. HSLDA threatened a lawsuit to finally end this CDPHE policy, which forced schools to correct their exemption process to be in accordance with state law in 2017-2018.

In 2018, CDPHE replaced their legislative mule Rep. Pabon with newly elected Rep. Kyle Mullica (D). In January 2019, Mullica introduced HB19-1312, School Immunization Requirements. This bill aimed to “modernize” and “standardize” the vaccine exemption process. This was double-speak to create an electronic state exemption form that bypassed the FERPA privacy protections at the local schools, and thereby directly uploaded exemption records to CIIS, the state vaccine tracking registry. It also gave power to the state board of health to adopt the ACIP recommendations on exemptions (double-speak for zero exemption policy) and to mandate vaccines which are currently only recommended (hepatitis A, rotavirus, and meningococcal). Furthermore, it required physicians to submit all immunization and exemption data to CIIS, when no requirement existed for CIIS participation. This bill died because hundreds of parents showed up weekly in Denver, causing so much disruption in the Capitol on a daily basis that the Democrats let it die begrudgingly in the final hours of session.

Because rookie Rep. Mullica failed in his first bill attempt, CDPHE reintroduced their bill in 2020 in the Senate with co-sponsors Sen. Kevin Priola (who recently admitted he has actually been voting as Democrat for years while portraying himself as a Republican) and Sen. Julie Gonzalez (Democratic abortion activist). Because Mullica had reported to the media that he had been the victim of a death threat (despite neither Northglenn police nor Colorado State Patrol were able to produce evidence of this death threat to the public), his Democrat peers told parents that they were out for “revenge.” (Yes, this unhinged vindictiveness is the state of affairs in the Colorado Capitol under a Democratic supermajority). SB20-163, School Entry Immunization, created a state exemption certificate, and new requirements that make obtaining a vaccine exemption nearly impossible.

SB163 legislated three ways to achieve “zero exemptions:” (1) create a certificate that doctors will refuse to sign, (2) create an education module that captures all exempting students in the CIIS tracking registry (resulting in parent refusal and leaving public schools), and (3) create a public reporting requirement for schools that shames administrators into pressuring parents to vaccinate (especially in small, rural schools where only a few unvaccinated students can put the school in CDPHE’s “red” status). SB163 doubled down on the threat to medical freedom with an additional threat to religious freedom, as many of the vocally opposed parents were homeschool parents. This law created the term “nonmedical exemption” to replace a religious or personal belief exemption, and to undermine the protections in the Religious Freedom Restoration Act of 1993. First, SB163 created a state exemption certificate that would place doctors under CDPHE’s scrutiny and threat to their medical license for signing a valid medical exemption, and doctors would also refuse to sign to approve someone’s religious beliefs in a “nonmedical” exemption. Second, SB163 created CDPHE’s online education module on vaccines, which does not provide informed consent on the associated risks but does capture personally identifying information for inclusion in CIIS. Third, SB163 created a 95% vaccination standard for all schools and a CDPHE school-shaming dashboard to coerce vaccine uptake on parents. Prior to SB163, since 1978, parents provided a doctor’s letter or statement of exemption to their local school and medical privacy was upheld, with no evidence of demonstrated risk to public health. This bill was passed during February to June in 2020, with many COVID restrictions to public participation in the legislative process. Despite an unprecedented Sunday hearing with a time limit of 90 minutes on public testimony, thousands of people protested outside during the House Health & Insurance Committee hearing.

Gov. Polis’ amended Executive Order is a violation of FERPA protections

A student’s health records, including information related to immunizations received and exemptions, are considered part of the educational record and are protected from disclosure in the Family Educational Rights and Privacy Act (FERPA) of 1974.

In October 2021, Gov. Polis amended an Executive Order with the requirement that CDE share personally identifying information of students with CDPHE without the prior, written parental consent required by FERPA:

“I direct the Colorado Department of Education to share with the Colorado

Department of Public Health and Environment (CDPHE) student

information necessary for public health purposes of ongoing COVID-19

investigation and disease mitigation, including information identifying the

student’s school of attendance and sufficient information about students to

match their information to records in CDPHE immunization and disease

control databases. This data sharing is necessary in connection with the

COVID-19 pandemic to protect the health and safety of our student

population and is permissible pursuant to the Family Educational Rights

and Privacy Act, 20 U.S.C. § 1232g(b)(1)(I), which permits such data

sharing with appropriate persons in connection with an emergency if the

information is necessary to protect the health or safety of the student or

other persons.”

A basic understanding of FERPA would justify a legal challenge to Polis’ Executive Order.If FERPA allowed the sharing of student PII, then why is the Executive Order necessary? FERPA allows the sharing of aggregate data, not PII, but that fact is not clarified in the Executive Order to the public. CDE understood that FERPA prohibited the sharing of the student data with PII and refused to share the student data with CDPHE, which resulted in Polis issuing the Executive Order. Moreover, can Polis use the health and safety emergency exceptions of FERPA to request student PII two months after he declared the emergency phase of the pandemic had ended? Furthermore, how has this sensitive data sharing demonstrated that it protects health or safety? The COVID vaccine does not prevent transmission, so what evidence is there that any disease mitigation has resulted from this data sharing? CDPHE launched the dashboard in March 2022, eight months after Polis declared the emergency phase of the pandemic had ended. Who will hold Polis and CDPHE accountable?

This is a short list of FERPA violations that should be challenged legally in this EO:

  1. Are schools recording this sharing of PII in the student record as required by law? Can CDE and CDPHE justify that COVID is a significant threat to daycares, K-12, and college students?

“When an educational agency or institution makes a disclosure under the health or safety exception, it must record in the student’s education records the articulable and significant threat that formed the basis for the disclosure, and the parties to whom the information was disclosed.  See § 99.32(a)(5).” Source: US DOE

  1. FERPA requires a case-by-case request of PII, and blanket requests like Gov. Polis’ EO are prohibited.

“An educational agency or institution must make this determination on a case-by-case basis, taking into account the totality of the circumstances pertaining to a threat to the health or safety of a student or others. If the school determines that there is an articulable and significant threat to the health or safety of a student or other individuals and that a third party needs personally identifiable information (PII) from education records to protect the health or safety of the student or other individuals, it may disclose that information to appropriate parties without consent.” Source: US DOE

  1. FERPA also requires an actual or imminent emergency to be in place for release of PII. A COVID epidemic, by the epidemic definition of case numbers, does not currently exist and has never occurred among students in daycares, K-12 schools, and college students.

FERPA’s health or safety emergency provision permits such disclosures when the disclosure is necessary to protect the health or safety of the student or other individuals. See 34 CFR §§ 99.31(a)(10) and 99.36. This exception to FERPA’s general consent requirement is limited to the period of the emergency and generally does not allow for a blanket release of PII from a student’s education records. Rather, these disclosures must be related to an actual, impending, or imminent emergency, such as a natural disaster, a terrorist attack, a campus shooting, or the outbreak of an epidemic disease.Source: US DOE

  1. Schools may NOT release PII for emergency preparedness for the future.

“Disclosures made under the health or safety emergency provision must be ‘in connection with an emergency,’ which means it must be related to an actual, impending, or imminent emergency, such as a natural disaster, a terrorist attack, a campus shooting, or the outbreak of an epidemic disease.” Source: US DOE

  1. CDPHE must destroy the data after the period of the emergency ends, and when the purpose for the PII request is no longer valid. There is no provision in FERPA that allows Polis or CDPHE to make a statewide blanket request for student PII and store it in a database forever. CDE & CDPHE are required to publish when the data will be destroyed.

“FERPA requires that PII from education records be destroyed when no longer needed for the specific purpose for which it was disclosed, and that the written agreement specify the time period for destruction.” Source: US DOE

Freedom supporters recognize the threat of this data collection

Senator Paul Lundeen and State Board of Education Vice Chair Steve Durham articulately expressed the many concerns about this data theft in The Gazette:

“The data dashboard was created using sensitive student data from both the Colorado Department of Education (CDE) and the Colorado Department of Public Health and Environment. In particular, data shared with CDPHE included student personally identifiable information like names, dates of birth, gender, district of parents’ residence, grade level, and more.

These personally identifiable data points were then overlaid with state-held medical records related to COVID-19 vaccination status — also extremely sensitive information for many families, especially in the politically charged atmosphere surrounding COVID-19 — to determine whether individual students had been vaccinated. Once matched, CDPHE used the data to calculate school- and grade-level vaccination rates and build the associated public dashboard.”

A parent at Falcon School District, Jeff Kemp, expressed his valid concerns about the student data sharing to KOAA:

“I think it is unnecessary, overreaches, and problematic because it sets precedent for the next version,” said Jeff Kemp, Falcon School District 49 parent.

He doesn’t see the purpose in the new directive.

“Wasn’t necessary two months when we all thought we were going to die, wasn’t necessary six months ago when there was another surge, and it’s clearly not necessary now. Are people getting sick? Sure. Are they getting seriously ill? No. Percentages are roughly the same, if not better,” said Kemp. 

Kemp also believes the new tool will do more harm than good.

“They are putting our schoolhouses in this uncomfortable position of being mandatory reporters on things that don’t affect kids, don’t matter to kids. It is certainly not the role of our government, I’ve never asked to help me manage my health, I will never ask them to manage my health. I will not ask the government permission to educate my children, and I’m certainly not asking the government’s help in managing my children’s health,” said Kemp.

He says state health officials should not have access to student information, and that it raises concerns over privacy. 

“What are they going to do with it in ten, fifteen years from now. That’s what we don’t know, we don’t know how it’s going to be used but we know it builds profiles and a mechanism for the government to be more intrusive,” said Kemp.

For people who support this data sharing, they might think it provides a false security by health enforcement (contact tracing) or safety in schools (zero COVID mitigation measures). Those who are apathetic might even think this personally identifying information has always been shared. But in reality, the state notifying the public that a named person is unvaccinated only serves to make the person a target. It does not “guide local response” in any responsible way. The unvaccinated are not disease carriers, and the vaccinated are not immune to disease. This article illustrates that the state government officials who make these decisions are not morally guided people, not genuinely concerned about public health and safety, and not held accountable for violating state and federal law to reach their goal of zero exemptions. If this Executive Order remains unchallenged in the courts for illegal data sharing, we can expect that employers and state agencies will be under the same reporting requirements and coercive tactics in the near future which will threaten employment and benefits for those who have exemptions or are bringing down the 95% compliance rate for any given public or private entity.

Share:

Facebook
Twitter
LinkedIn

3 Responses

  1. It is even worse they are tracking well child checks at HCPF and who is and who is not doing them through the Colorado Medicaid. Please stay informed by attending as many HCPF meetings. Learn about how the meetings are ran through an online G suite platform where you cannot meet one another. Also learn about how important questions by parents are censored when state emails are given out, only for parents to be repeadetly ignored. Not only is the state ignoring the Olmsted Act for it’s children by screening it’s most disabled out of it’s programs for Medicaid but it wants the parents of these children who are on waivers vaccinated. If the parents are harmed no one is liable which further puts the parents on the hook for care, medical costs, and more. Colorado is creating a medical police state that is unethical and exploits low income people and working class and anyone on Medicaid or a waiver. If you are harmed; you will not be helped. The office of community living is the waiver program, the ACC is Medicaid, and HCPF is policy finance. The Behavioral Taskforce is not ABA but Mental Health and Psych. Colorado’s track record for humanitarian efforts is poor. The ARPA funding is not going to the newly created disabled adults of disabled children. They are getting denial of PDN hours….Don’t get me started on the institutions that do not allow parents to have behavioral health, and or STD records and it’s all completely legal. So if something happens to your child good luck getting the records!

  2. As a parent of two vaccine injured adult kids and one unvaxxed ( except getting a tetanus shot at age 8 after getting a nasty gash , which later I found out was actually dTaP !) I’ve been reading and watching vaccine information since my eldest was brain damaged at age 4 months in 1988 from the DPT shot and unvaxxed daughter got lifelong RA after one DtAP shot in 1998 ) I’ve come to the conclusion we must be pro active. Especially after the Plandemic. It’s time to challenge the societal propaganda that vaccines provide safe immunity to diseases and to tell the truth since were are at a crisis that must be addressed. I always knew they were injuring and killing people but it’s clear we now must avtuvely educate people. I’ve been doing that everywhere I can for 35 years. The DPT study done in Africa by Dr Peter Aaby is a great place to start. He proved that those vaccinated with DPT and OPV had a 10x increased mortality ! Along with dr Suzzanne Humphries book Dissolving illusions and the latest book , Turtles All the Way Down , I feel strongly the crack that existed before is now a chasm that’s been opened up by the Plandemic. Not only in the regular public sphere but also in the medical arena , where these belief systems have now been challenged. I can be reached at hs4265@protonmail.com

  3. As a parent of two vaccine injured adult kids and one unvaxxed ( except getting a tetanus shot at age 8 after getting a nasty gash , which later I found out was actually dTaP !) I’ve been reading and watching vaccine information since my eldest was brain damaged at age 4 months in 1988 from the DPT shot and unvaxxed daughter got lifelong RA after one DtAP shot in 1998 ) I’ve come to the conclusion we must be pro active. Especially after the Plandemic. It’s time to challenge the societal propaganda that vaccines provide safe immunity to diseases and to tell the truth since were are at a crisis that must be addressed. I always knew they were injuring and killing people but it’s clear we now must avtuvely educate people. I’ve been doing that everywhere I can for 35 years. The DPT study done in Africa by Dr Peter Aaby is a great place to start. He proved that those vaccinated with DPT and OPV had a 10x increased mortality ! Along with dr Suzzanne Humphries book

Leave a Reply

Your email address will not be published.

Table of Contents

ABOUT THE CHEC INDEPENDENT SCHOOL
A part of Christian Home Educators of Colorado, the CHEC Independent School is an umbrella school that serves homeschool families across the state of Colorado from our home office in Parker. We believe that parents are responsible for the education of their children, and through the Independent School, we purpose to help Colorado parents succeed in that God-given role.
colorado conservative values kim monson

Sign up for The Kim Monson Show newsletter.

Every Sunday you’ll get our upcoming week’s schedule, links to Kim’s latest podcasts, feature articles on the important political and social issues facing Coloradans. You’ll also be the first to hear about exclusive events and offers from Kim and her partners.