SB424 Summary

• Prohibits the Department of Education, State Board of Education, local boards of education, and public and private schools and institutions of higher learning from disclosing personally identifiable student information to third parties without parental or student consent, except in limited circumstances including legal requirements, court orders, authorized contracts, research studies, audits, and health/safety emergencies.

• Bans all use of personally identifiable student information for developing commercial products or services, with no exceptions for consent.

• Requires detailed records of all non-consensual disclosures to be included in student educational records and mandates public notification of research, audit, and evaluation disclosures including information types, recipient entities, purposes, timeframes, and safeguards.

• Authorizes the Attorney General to enforce the act and impose penalties on violators, prohibiting them from obtaining student information for at least five years.

• Requires the State Auditor to conduct regular audits to ensure compliance with proper procedures, notification and consent forms, and effective security and privacy protections.