The importance of protecting student data in K-12 education cannot be overstated. Safeguarding student privacy not only ensures the integrity of educational institutions but also upholds the trust of students, parents, and the wider community. And these protective measures need to go beyond ticking off boxes on a mandated compliance check list. Why? Because information security is a journey, not a destination and therefor requires continuous attention and care.