As a new school year began, the 2026 data breach involving Instructure’s Canvas platform offered a timely reminder of the risks schools face when sensitive information is entrusted to technology vendors.

Parker Poe hosted a 30-minute virtual conversation examining the lessons education leaders could take from the incident. Attorneys from our Education and Data Privacy and Security teams discussed:

• Considerations when working with education technology vendors
• Questions to ask when a vendor reports a potential data incident
• Legal, operational, and communication considerations following a breach
• Practical ways to strengthen vendor oversight and incident response planning

The goal was not simply to prepare for the next breach, but to help school leaders identify vulnerabilities and respond with greater clarity when an incident occurs.

View the webinar replay here.

View the webinar slides here.