SB1306 Summary

• Establishes comprehensive student data privacy protections by defining "education data system," "student level data," and related terms, and prohibits collection of political affiliation, religious affiliation, biometric information (except as provided), and firearms ownership data.

• Requires the data governance commission to review and approve all new student data elements before inclusion in education data systems, with public notice and 60-day comment period for proposed collections.

• Restricts student level data access to authorized department staff, school personnel, students and parents (their own data only), other state agencies as required by law, and approved researchers receiving only masked data without personally identifiable information.

• Prohibits school districts and charter schools from reporting juvenile delinquency records, criminal records (except school safety incident data), and medical/health records to the department.

• Creates chief privacy officer and chief data officer positions within the department of education to oversee privacy protections, security audits, breach response planning, and compliance with federal and state privacy laws.