Guardians or Spies? Balancing Student Privacy and Integrity in Online Proctoring

A student’s exam should not feel like a search warrant. A school’s online test should not feel like an honor system taped to a gradebook either.

That is the problem online proctoring keeps running into. Schools need credible assessments. Teachers need some way to protect honest students from being penalized by dishonest ones. Administrators need grades, certifications, and placement decisions that mean something.

Students, meanwhile, do not want to turn their bedrooms into inspection sites.

The privacy debate around online proctoring is often framed as if there are only two options: monitor everything or trust everyone blindly. That is a lazy choice. The real question is not whether integrity matters. It does. The question is how much monitoring is justified, what kind of data is collected, who reviews it, and whether the method fits the stakes of the exam.

“Good proctoring should protect the test without treating every student like a suspect.”

Why Students Push Back Against Online Proctoring

Online proctoring can feel invasive because it reaches into spaces that schools usually do not enter. A classroom exam happens in a school-controlled environment. A remote exam often happens at a kitchen table, bedroom desk, shared dorm room, public library, or crowded family home.

That changes the privacy equation.

The most controversial proctoring methods often include webcam monitoring, microphone access, screen recording, room scans, browser lockdown, eye or face tracking, ID verification, and automated behavior flags. Some of these tools may be reasonable in certain circumstances. Others become hard to justify when used by default for ordinary quizzes or low-stakes assignments.

Student discomfort is not just about “not wanting to be watched.” It can involve real concerns:

• A student may not want classmates, instructors, or vendors seeing their living space.
• A webcam may capture family members, religious items, medication, financial papers, or other private details.
• Students with disabilities, anxiety, neurodivergence, poor lighting, unstable internet, or shared housing may be flagged unfairly.
• Automated flags can feel like accusations, even when they are only supposed to be review signals.
• Younger students may not understand what data is being collected or how long it will be stored.

This is where schools need to be especially careful. Privacy concerns are not automatically excuses for cheating. They are often reasonable objections to systems that collect more information than the assessment actually requires.

What Schools Are Trying to Protect

To be fair to teachers and administrators, academic integrity is not a decorative concern. If online tests become easy to manipulate, the damage spreads.

Honest students lose trust in the grading process. Teachers spend more time investigating suspicious behavior instead of teaching. Schools risk weakening the value of grades, course credits, placement decisions, certifications, and program standards.

The mistake is assuming that because integrity matters, maximum monitoring must be the answer. It is not. More surveillance does not always mean more fairness. Sometimes it creates a new fairness problem: students with quiet rooms, newer laptops, strong internet, and private study spaces have an easier time complying than students without those advantages.

“A better approach begins with proportionality.”

The Principle Schools Need: Proportionality

Proportionality means the monitoring should match the risk.

A high-stakes final exam, certification test, or placement assessment may justify stronger integrity controls. A five-question weekly reading quiz probably does not need webcam monitoring, microphone access, ID capture, and room scans. When every exam gets treated like a licensing board test, students notice. Trust erodes quickly.

Before turning on invasive monitoring, schools should ask:

• What is the actual risk if cheating occurs?
• Is this assessment high-stakes or routine?
• Can the test be redesigned to reduce cheating without surveillance?
• Is webcam or microphone monitoring truly necessary?
• Could browser activity, tab switching, time limits, randomized questions, or oral follow-up provide enough integrity protection?
• What data will be collected?
• Who can access it?
• How long will it be retained?
• How can a student challenge an incorrect flag?

These questions are not obstacles to integrity. They are what make integrity defensible.

The Legal Layer: Privacy Is Not Just a Feeling

Schools should not treat online proctoring data as harmless just because it is digital.

In the United States, FERPA may be relevant when a photo or video is directly related to a student and maintained by the school or by a party acting for the school. That means proctoring recordings, ID images, or exam-related video evidence may require serious handling, especially if used for disciplinary or official academic purposes.1

For K–12 schools, COPPA may also enter the picture when online services collect personal information from children under 13. The FTC’s guidance includes requirements around notice, consent, data minimization, security, retention, and not collecting more information than reasonably necessary.2

Public institutions have another layer to consider: constitutional privacy concerns. The Ogletree v. Cleveland State University case drew attention because a federal court found that a required room scan of a student’s bedroom, in the circumstances of that case, violated the Fourth Amendment. That does not mean every proctoring method is unconstitutional. It does mean room scans are legally and ethically sensitive, especially when used by public schools without clear alternatives, consistent policies, or meaningful notice.3

This is not legal advice. Schools should involve counsel when designing exam-monitoring policies. But the practical lesson is simple: if a proctoring practice reaches into a student’s private space, the school should be able to explain why it is necessary, why a less invasive option was not enough, and how student data is protected.

Transparency Is Not a Checkbox

Students should not discover monitoring requirements five minutes before an exam begins.

Transparency belongs in the course policy, syllabus, test instructions, and student setup flow. NJIT’s online proctoring policy is a useful example: it requires courses using online proctoring to identify the proctoring solution in the syllabus from the first day of class and to disclose environment scan requirements when applicable.4

That notice matters because it gives students time to prepare, ask questions, request accommodations, or choose appropriate testing spaces. It also forces the institution to be clear about what it is doing.

Good transparency should explain:

• Whether camera, microphone, screen sharing, or ID capture is required
• Whether the session is recorded
• Whether snapshots are captured
• What behavior may generate flags
• Whether flags are reviewed by a human
• Whether students can appeal or explain flagged behavior
• What accommodations are available
• How long data is retained
• Who can access the data
• Whether a less invasive test option exists

A consent screen is useful, but it should not be a theatrical “I agree” button hiding a vague policy. Consent works best when students understand the tradeoff before the exam begins.

When Online Proctoring Is Justified

Online proctoring is easiest to justify when the assessment has real consequences.

That may include final exams, admissions or placement tests, professional certification exams, make-up exams, remote courses with accreditation requirements, or assessments where identity assurance is important.

Even then, the least invasive effective method should come first. A school may not need full webcam and microphone monitoring if the exam can be protected through secure test links, time limits, browser-focus tracking, randomized questions, screen-share checks, or human-reviewed integrity signals.

The point is not to remove all monitoring. The point is to avoid making invasive monitoring the default answer to every assessment problem.

When Less Invasive Alternatives Make More Sense

Sometimes the best proctoring choice is not to proctor at all.

Teachers can reduce cheating pressure through assessment design. Open-book exams, project-based work, oral follow-ups, short written defenses, personalized prompts, question banks, timed sections, applied case studies, and reflective explanations can all make cheating less useful.

These methods are not perfect. Nothing is. But they can shift the exam from “Can the student hide outside help?” to “Can the student actually explain, apply, or defend what they know?”

That is often a better test anyway.

The research on educators’ use of online proctoring shows that many instructors did develop alternative assessments that did not require online proctoring, while those who used proctoring often weighed privacy risk against proctoring necessity.5

This is the healthier mindset: use proctoring when it fits, not because the technology exists.

What Privacy-Respecting Proctoring Should Look Like

A privacy-respecting proctoring system should not begin with surveillance. It should begin with restraint.

That means camera and microphone monitoring should not be treated as automatic. ID capture should be optional or limited to assessments where identity verification is truly needed. Flags should be treated as signals for review, not proof of misconduct. Teachers should be able to confirm, dismiss, or escalate issues instead of letting software make disciplinary decisions on its own.

A better proctoring workflow should include:

• Secure test access without unnecessary student accounts
• A guided consent and setup flow
• Clear permission checks before monitoring begins
• Camera and microphone controls that teachers intentionally enable only when needed
• Browser integrity signals such as tab switching, focus changes, fullscreen exits, or screen-share status
• Human review of flags before any conclusion is drawn
• Student accommodations, including camera exemptions where appropriate
• Adjustable sensitivity for students with legitimate needs
• Limited and purposeful snapshot capture
• Clear reports that help teachers review the session without drowning in noise

Surveillance assumes the student is guilty and tries to collect everything. Integrity support looks for relevant signals, gives teachers context, and leaves judgment in human hands.

How Proctorly Approaches This Balance

Proctorly is built around a simple idea: online testing does not need to begin with cameras on.

By default, Proctorly tests can run without camera monitoring. Teachers have to choose when camera or microphone features are needed, instead of having the system treat every test as a surveillance event. That matters because defaults shape practice. If invasive monitoring is the default, it will be used even when it is not necessary. If restrained monitoring is the default, teachers have to make a more deliberate choice.

Proctorly also supports secure student test links, so students can access a test without creating an account. It guides students through consent, setup, and permissions based on the settings for that exam. It can help teachers monitor integrity signals such as tab switching, hidden-page activity, screen-share status, fullscreen exits, audio activity, and face-related signals when camera monitoring is enabled.

The important word is signals.

A flag is not a conviction. A student looking away, losing connection, switching tabs, or triggering a face-detection event may have an innocent explanation. Proctorly’s review workflow is designed so teachers can confirm, dismiss, clear, or escalate sessions after looking at the context. AI-generated summaries can help organize the review, but the teacher remains responsible for the decision.

Practical Policy Checklist for Schools

Before using online proctoring, schools should create a clear policy that answers practical questions.

• Which exams require proctoring, and why?
• Which monitoring features are enabled by default?
• When may teachers turn on camera, microphone, ID capture, or screen monitoring?
• What does the student see before monitoring begins?
• How are students notified in the syllabus or course policy?
• What accommodations are available?
• Who reviews flags?
• Can students explain or appeal flagged behavior?
• How long are recordings, snapshots, IDs, and reports retained?
• Who can access proctoring data?
• What vendor agreements govern privacy, security, and deletion?
• Are less invasive assessment methods available for lower-stakes work?

The Goal Is Trustworthy Assessment, Not Maximum Surveillance

Online exams need integrity. Students need privacy. Schools should refuse the false choice that says one must crush the other.

The right approach is narrower, calmer, and more deliberate. Use proctoring when the stakes justify it. Turn on invasive features only when they are necessary. Tell students what is happening before it happens. Review flags with human judgment. Offer accommodations. Keep data only as long as needed. Design better assessments when proctoring is not the right tool.

A school does not build trust by watching everything. It builds trust by knowing what it needs to protect, collecting only what it can justify, and treating students like people before treating them like test sessions.