As a school district tech director who puts data privacy at the top of his priority list, Jun Kim says 鈥渘o鈥 a lot.
No, that app doesn鈥檛 have sufficient privacy protections. No, you can鈥檛 bring a new platform into your classroom just because you like it. No, you can鈥檛 use that technology until you fill out these forms.
All those 鈥渘o鈥 responses can be exhausting for him鈥攁nd the district鈥檚 teachers and school leaders. So when Kim, the director of technology for Moore public schools outside Oklahoma City, stepped into his job about a decade ago, he had a ready-made hashtag to poke fun at his professional role: #junbrokeit.
Adding the faux social media signifier to many of his emails is Kim鈥檚 way of showing he gets it: Making technology work for teaching and learning while prioritizing things like securing student data can be time-consuming and frustrating.
It鈥檚 self-effacing, empathetic, just plain funny鈥攖he embodiment of Kim鈥檚 leadership style, said Amy Simpson, the principal of Moore鈥檚 Oakridge Elementary School.
鈥淗e is taking ownership of the technology ups and downs that we face in the district,鈥 she said. Though Kim doesn鈥檛 use the 鈥渂roke it鈥 joke often these days, he still champions the message that 鈥渋t鈥檚 OK to push the boundaries and be innovative and do these things that are going to give our kids the skills they need to be lifelong learners. But at the same time, understand things may fail, and that鈥檚 OK, too.鈥
And if technology鈥攐r the district鈥檚 policies and procedures around it鈥攁ren鈥檛 working for particular staffers, they know who is responsible. 鈥淗e鈥檚 saying, 鈥楧on鈥檛 go blame anyone else. I鈥檓 the leader. Jun broke it,鈥欌 Simpson said.
Kim鈥檚 sense of humor is counterbalanced by what he says his wife calls his take-action, 鈥渕ilitary voice,鈥 honed over the more than three decades that Kim has juggled his work as an educator鈥攖eacher, coach, administrator, principal, district tech director鈥攚ith military service, mostly in the Oklahoma National Guard.
鈥淚f the military has taught me one thing, it鈥檚 that you look at processes, how you make [them], while taking care of your people,鈥 Kim said. 鈥淭echnology nowadays, it鈥檚 a dime a dozen. You can throw whatever tech in there you want, but if people don鈥檛 care, if they don鈥檛 know how to use it, it鈥檚 a paperweight.鈥
Spreading his know-how throughout the state
Kim has not only set up and consistently refined a thorough鈥攂ut educator-friendly鈥攑rocess for vetting platforms to help secure student and staff information in his own district, he鈥檚 also helped ensure the entire state can benefit from his knowledge and from his district鈥檚 understanding of how to keep student and staff data safe.
Kim, whose suburban district is the fourth largest in the state at more than 25,600 students, leads a team of 37 full-time staff and six high school student interns.
That level of technology support is much higher than what most districts in the Sooner State have, said Jack Green, a former district tech director and a founding member of Oklahoma鈥檚 chapter of the Consortium for School Networking.
鈥淢ost of Oklahoma is rural and has one person at most that鈥檚 responsible for information technology,鈥 Green said. And tech is far from their only role, he added. 鈥淭ypically, they鈥檙e driving a bus, they may be serving as custodian, a principal, a teacher, a superintendent.鈥
That leaves little time for scrutinizing the fine print on software contracts to understand how educational technology companies will collect and use student data. So Kim has worked to create a of platforms, applications, and programs that have been vetted for data-privacy practices by districts around the state.
Tech officials in smaller districts with fewer resources can use the clearinghouse to see what platforms other districts have signed off on and share expectations on data privacy.
鈥淪tudent-data privacy is his baby,鈥 said Sherri Pankhurst, the assistant superintendent of the Cleveland public schools, a 1,500-student district near Tulsa. 鈥淚 come from a smaller, rural district. The manpower is not there鈥 to properly vet even payroll software, she said. 鈥淎nd so, for him to take that charge, to lead a state-level initiative to help schools鈥 is very helpful.
Kim helped the district rebuild after a deadly tornado
Born in South Korea, Kim, 52, moved to the United States when he was about 6 for his father鈥檚 job at General Motors. The family lived in Michigan and Ohio before settling down in Moore, where Kim started as a 3rd grader and went on to graduate from high school.
Growing up, Kim鈥檚 parents used to joke that he always liked to 鈥渟ee who the newest baby in the neighborhood was,鈥 Kim recalled. 鈥淚鈥檝e always been interested in working with kids and just have a love for little ones.鈥
Teaching was a natural fit.
But right before Kim entered college, his father was laid off from GM. He still offered to take out loans to cover his son鈥檚 tuition, but Kim saw a different path. He joined the Air Force Reserve of the U.S. Air Force, then later transferred to the Oklahoma National Guard. He鈥檚 served in the military for 32 years and counting, beginning as a weapons loader for F-16 fighter jets. He鈥檚 also worked as a stinger operator, graphic artist, public affairs supervisor, and human resources adviser.
In 2013, while he was deployed in Afghanistan, Kim learned he had been selected as the district鈥檚 director of technology.
Just days after returning from a war zone, Kim found himself fighting a different kind of battle when a major tornado hit Moore in May. Seven elementary school students in the district were killed when a school building was destroyed. The storm demolished two schools and damaged other facilities, including the building that housed key district information, recalled Robert Romines, Moore鈥檚 current superintendent.
鈥淎ll of our data from payroll, employee records, student data, anything that you can think of was within that building. That was a total loss,鈥 said Romines, who was the personnel director at the time the storm hit but was already slated to step into the superintendent鈥檚 role. The district was able to recover some servers鈥攚ithout which Moore would not have been able to open its doors in time for the beginning of the next school year in August, Romines said.
There was no better way to underscore the importance of keeping data secure and backing it up, Romines said. 鈥淲e needed to ensure that we had redundant servers that would continue working in the event of another catastrophic event here,鈥 he said.
Kim coordinated the recovery and rebuilding of the district鈥檚 technology infrastructure with staff, internet providers, and vendors.
The experience taught him to always 鈥渙verplan. Ask what ifs,鈥 even if it seems a little nutty, Kim said. 鈥淚鈥檝e swapped out the 鈥榓luminum foil hat鈥 to a 鈥榖igger-brimmed [aluminum foil] sombrero,鈥 he joked.
Data security is paramount in the age of AI
These days, Kim and thousands of other education technology directors are walking a tricky tightrope as they work to make the most of a rapidly changing ed-tech landscape that is already revolutionizing learning鈥攚ithout endangering student data.
Thousands of applications and platforms can spark student engagement, make classroom organization easier, or personalize instruction for students. And school systems are embracing them: Districts around the country accessed an average of 2,591 distinct ed-tech tools during the 2022-23 school year, .
At the same time, cyberattacks of all sorts are becoming increasingly common in K-12 schools. Eighty percent of K-12 schools had been targeted by ransomware, according to a survey of IT professionals conducted last year by Sophos, a cybersecurity firm. That鈥檚 a higher percentage than any other industry surveyed, including health care and financial services.
Cyberattacks can cost districts millions of dollars and days or even weeks of missed learning time. Hackers have applied for credit cards in children鈥檚 names and sent threatening messages to parents. And student-data privacy challenges will likely grow bigger as artificial intelligence鈥攚hich relies on massive amounts of data鈥攑owers more and more ed-tech tools.
Most districts are on their own fighting this tidal wave of attacks, many of which come from shadowy overseas criminal gangs.
Under Kim鈥檚 leadership, Moore has been ahead of the curve in paying attention to the potential dangers for student information to fall into the wrong hands.
Back in 2018, even before the pandemic sparked a massive expansion in the use of education technology, Kim began requiring teachers who wanted to use an application not already approved by the district to submit it for vetting.
He asked vendors to fill out a survey explaining, among other things, what kind of data they collect about students and how they plan to use it. Will they promise to destroy Moore鈥檚 student data when the relationship with the district has ended? He and his team also work to get a sense of how each program or application will integrate with the district鈥檚 other technologies.
Kim has the curriculum team look separately at the app or software to make sure it is in line with how the district wants to approach a particular topic or subject. He鈥檒l also point teachers to software or programs the district already has that may meet their needs as well as鈥攊f not better than鈥攖he program they are asking about.
Kim works to make sure teachers understand the reasons behind these procedures so that his requests for information about a platform they might want to use feel more meaningful than a tangle of red tape.
鈥淗e does a really good job of explaining the why versus just saying, 鈥極h, we鈥檝e got to do this, because we鈥檝e got to protect student-data privacy,鈥欌 said Laura Rousseau, the principal of South Ridge Junior High. 鈥淔or us, as educators, the why is important. We expect our kids to understand the why when they鈥檙e learning things. And he does the same for us. He tells us the nitty-gritty behind policy changes and procedure changes.鈥
Kim is also willing to change course if his colleagues say they have a better way to do something or that a procedure isn鈥檛 working. Whenever a big policy or process change is in the offing, Kim will present it to principals first to get a sense of how to refine and message it to teachers and other district employees.
鈥淏efore [a policy] goes out to our thousands of employees and thousands of students, we鈥檙e able to digest it, and shoot holes in it, and troubleshoot,鈥 Rousseau said. Kim asks how the district can enable people 鈥渋n the school building to find success with whatever digital thing we鈥檙e needing to use,鈥 Rousseau said.
Kim鈥檚 openness to others鈥 ideas and willingness to listen to their frustrations make it easier for Moore鈥檚 educators to hear, for example, that a long-beloved application or platform has updated its privacy policy and is no longer allowed in Moore. That鈥檚 something that often happens with STEM apps, Rousseau said.
While Kim will try to find a safer alternative to replace a platform that no longer meets Moore鈥檚 privacy standards, sometimes there simply isn鈥檛 one.
鈥淲e can get very mad at Jun sometimes,鈥 Rousseau conceded. 鈥淏ut I think everybody knows that at the end of the day, he鈥檚 having to put himself in a position to protect us from any long-term consequences that can come from our data getting out into the world where we don鈥檛 want it.鈥
Complicating Kim鈥檚 communications challenge: The impact of all this work is largely invisible. It鈥檚 hard to celebrate the student data that weren鈥檛 stolen or the hack that was thwarted.
The closest thing to a public victory: Hackers did hit Moore last year in what Kim deems a 鈥渃yber event.鈥 The systems Kim put in place helped keep sensitive student data out of their hands, Romines said. Within an hour, Moore鈥檚 tech was back up and running.
Though Kim has spent years refining and reworking Moore鈥檚 process, he 鈥渨ill be the first to tell you we鈥檙e nowhere near where we need to be鈥 when it comes to data privacy, Romines said. 鈥淚 don鈥檛 think we鈥檒l ever be where we need to be because [technology means] a constant change. And he just does a really good job on thinking out toward the future and doing what needs to be done.鈥
Keeping students 鈥榙igitally safe鈥
Kim sees securing student data as just another part of a school鈥檚 directive to protect its students.
鈥淪chools are really great about trying to keep kids safe, right? Physically safe, emotionally safe,鈥 Kim said. 鈥淣ow, it鈥檚 just a matter of: Can we keep them digitally safe?鈥
That mission encompasses all children, not just the ones in Moore, he added. 鈥淥ur whole focus has been our kids, whether they鈥檙e my kids in Moore or kids in Gotebo, Oklahoma, or Cleveland, Oklahoma, it doesn鈥檛 matter. They鈥檙e still kids, and we still want to protect kids鈥 information.鈥
That鈥檚 why in 2022, Kim played a leading role in developing Oklahoma鈥檚 Student Data Privacy Consortium, which gives participating districts access to resources for vetting software, plus lists of programs and platforms other districts have approved. At least 26 other states have similar organizations.
Data-privacy work has largely been a scattershot, district-by-district affair. Getting multiple districts to team up on the challenge can be a major boon for school systems with limited resources鈥攁nd can even make life easier for vendors, experts say.
鈥淚f you build a sort of a collaborative, or cohort of people who are deeply, deeply engaged in the work, then you spread the knowledge at scale,鈥 said Linnette Attai, the project director for CoSN鈥檚 Student Data Privacy Initiative and Trusted Learning Environment Program.
Kim demurs when others credit him as the driving force behind Oklahoma鈥檚 statewide privacy work, his colleagues say.
鈥淗e brags about maybe how far the state has come or the districts have come, but he never gives himself credit for any of it,鈥 said Emily Monroe, an education technology specialist in Moore. 鈥淗e goes above and beyond for so many districts across the state. He is really a mentor to a lot of other ed-tech directors and IT directors across the state. And when we鈥檙e at a conference with him, he鈥檚 like a rock star. Everyone knows him.鈥