Our bank participates with a number of local school programs where a small number of students are brought in to observe various job functions in the bank. Obviously it is almost impossible to avoid having these students see some non-public personal information. We feel these programs are beneficial in many ways and we want to continue this involvement. Are there any thoughts on how to deal with this? We thought about a confidentiality agreement, but most of the kids are minors.

Your instincts are on the right track . . . you can't really require them to sign a confidentiality agreement. However, one of the first things I'd cover with the newly arriving student is your security program and culture. Then I wouldn't expose them unnecessarily to NPPI beyond what's necessary to their mission.