Qualitative data from a two-year study provides school administration and technology staff understandings and challenges with their use of surveillance in their role. School administration and technology staff offer their understandings of their need to conduct privacy impact assessments (PIA) when student personally identifiable data may be collected, stored or disseminated to 3^rd parties. Connections between advancements of privacy in electronic health records and record keeping of student confidential information is discussed as it relates to storing of confidential data and the inappropriateness of an all-access pass for employees.