AZ HB2645

Establishes a data governance commission to oversee the Student Accountability Information System and Education Learning and Accountability System, with authority to review and approve new student data collections and publish a publicly available data inventory with definitions of all collected data elements.

Requires the Department of Education to develop and publish privacy and security policies complying with the Family Educational Rights and Privacy Act, including restrictions on access to student level data and procedures for handling data requests from state and local agencies.

Prohibits school districts and charter schools from reporting juvenile delinquency records, criminal records (except school safety incidents), medical records, biometric information, and from collecting data on political affiliation, religious affiliation, firearms ownership, or student biometric information.

Establishes a Chief Privacy Officer position appointed by the Superintendent of Public Instruction to oversee agency privacy policy, conduct privacy impact assessments, and establish complaint procedures for privacy violations.

Establishes a Chief Data Officer position to coordinate data collection, storage, and security policies in compliance with applicable laws and fair information practice principles.