SB218 Summary

• Establishes the Student Data Accessibility, Transparency, and Accountability Act to protect student data while ensuring privacy rights of students and parents are honored and respected.

• Creates a Chief Privacy Officer position appointed by the Commissioner of Education responsible for data privacy policy, compliance audits, privacy impact assessments, and complaint procedures.

• Prohibits school districts from reporting juvenile delinquency records, criminal records, medical/health records, and student biometric information to the state unless required by law or in health/safety emergencies.

• Requires the Department of Education to maintain a public data inventory, develop security plans with encryption and access controls, and provide parents and students annual notification of privacy rights and ability to access education records within three business days.

• Mandates third-party contracts involving student data include protections prohibiting data use for targeted advertising, retention after contract completion, unilateral changes, and collection of political affiliation, voting history, income, or religious information.