AK SB3

Amends state law to establish comprehensive student data privacy protections by requiring schools, districts, and the Department of Education to adopt policies limiting collection, storage, and sharing of student data to authorized purposes only.

Prohibits sharing of student data with outside agencies or entities without written, dated consent from students or their parents/guardians, except for directory information (name, address, phone, email, attendance dates, honors/awards).

Requires the State Board of Education to create and annually publish a data inventory listing all student data fields collected, the reason for collection, entities with access, server locations, and safeguards protecting personally identifiable information.

Bans collection and sharing of specified sensitive student data including juvenile delinquency records, criminal records, medical/health records without consent, biometric information, and political or religious affiliation.

Mandates data security plans with privacy compliance standards, authentication, security audits, breach notification procedures, encryption, and appropriate sanctions for noncompliance; applies same privacy policies to universities, postsecondary institutions, workforce training programs, and youth programs.