Senate Bill 500 Summary

• Creates the Student Data Vendor Security Act to increase security and transparency in sharing student data with third-party vendors and school service providers.

• Requires local education agencies to maintain lists of school service contract providers and on-demand providers that access student personally identifiable information, updated at the beginning and mid-point of each school year and available to parents upon request.

• Prohibits school service contract providers from selling student data, using it for targeted advertising, or creating personal profiles without consent; requires providers to notify education entities of data breaches and obtain parental consent for material changes to privacy policies.

• Mandates school service contract providers maintain comprehensive information security programs and destroy student data upon request or within specified timeframes after contract termination.

• Becomes effective June 1, 2024, and applies to all contracts entered into or renewed with school service contract providers on or after that date.