AZ SB1247

State Board of Education must create and publish a data inventory and dictionary of student data elements in the education data system on the Department of Education website.

All personally identifiable information and student-level data in the education data system is confidential and not a public record.

Department of Education shall develop and publish privacy policies requiring restricted access to student data limited to authorized department staff, school personnel, students and parents (for their own data), state agencies, and entities with lawful subpoenas or court orders.

Department must develop a detailed security plan including access authorization guidelines, privacy and security audits, data breach notification procedures, and data retention policies.

Department may not transfer confidential student-level data to federal, state, or local agencies unless otherwise allowed by law, and must include privacy safeguard provisions in all private vendor contracts.