In this blog by Kerry Gallagher, she writes that while implementation of a vetting process for new apps or programs in school districts is essential to protect students’ personally identifiable information (PII) and aggregated data, vetting is not enough.