Rainbow DJ LabRas Tafari Inc. · Rainbow Beach Park, Chicago
Proposed:The Lab is not running yet. No class runs until every item on the launch checklist is complete.
Rainbow DJ Lab › Privacy › Breach Notification

Breach Notification

What Rainbow DJ Lab will do, and what we will tell families, if personal information is ever lost, stolen or exposed.

Our promise

If information about your family or child is ever exposed to someone who shouldn't have it, we'll tell you without unreasonable delay, tell you what happened in plain words, and tell you what we're doing about it. We won't wait to find out whether the law strictly requires notice before telling you.

Status: The Lab is proposed and not running yet. This policy was adopted by the Ras Tafari Inc. board on October 17, 2026.

What counts as a breach

Any time Lab information is accessed, seen, copied or lost without permission. For example:

  • someone gets into the Lab's database or a coach's sign-in
  • a Lab email (a registration notice, recap or sign-out notice) goes to the wrong person
  • a paper form or device with family information is lost or stolen
  • a service provider tells us its systems were breached
  • a private field is found showing on a family link or an in-room screen by mistake
  • a family link reaches someone outside that family

About family links and room codes: each private family link shows only one child, so a shared link exposes only that child's class activity. If a link is lost or shared, the coach re-issues it. The room code for in-room screens shows the station board for one class (first names and last initials, stations, jobs, check-in times and in-class activity, never glow notes or private data). It expires (4 hours by default) and the coach can end it any time, so a leaked room code stops working when the class ends. If a room code leaks during class, the coach ends it and issues a new one, and we tell families in that class what was visible.

What we do

  1. Contain it. Stop the exposure: revoke sign-in links, end room codes, re-issue family links, fix the fault, and ask the wrong recipient to delete what they got.
  2. Find out what happened: what information, whose, and for how long.
  3. Tell affected families without unreasonable delay, by phone and email.
  4. Tell the right authorities where the law requires.
  5. Fix the cause and write it down. We'll report what changed in our "You said, we did" report, without naming families.

What our notice will tell you

  • what happened and when, as far as we know
  • what information was involved
  • what we've done to contain it
  • what you can do to protect yourself and your child
  • who to contact: Stephen Henry, 872-255-9333, stephen@selassiefest.com

If a law-enforcement agency asks us to delay notice so it can investigate, we'll follow that request only as long as it applies, then notify you.

The law

The Illinois Personal Information Protection Act (815 ILCS 530) requires organizations that hold certain personal information about Illinois residents to notify them of a breach without unreasonable delay. The Lab holds names together with medical and allergy notes, and we treat all of that as covered.

The federal COPPA Rule also requires us to keep children's information confidential and secure. See COPPA compliance.

Keeping breaches from happening

  • Private family data is never sent to a family link or an in-room screen. See data privacy.
  • Coaches sign in with one-time emailed links. Only adults on the Lab's coach list can request one.
  • We collect as little as we can, and delete it on schedule.
  • A full access audit log is being built and is a launch requirement. See access records and audit log.

Sources