SB 1374 Summary

• School service providers must provide clear information about types of student personal information collected, how it is used and shared, and give prominent notice before changing privacy policies.

• School service providers must facilitate student and parent/guardian access to and correction of student personal information, obtain consent before using data inconsistently with their privacy policy, and maintain comprehensive information security programs.

• School service providers are prohibited from selling student personal information, using student data to target advertisements, or creating personal profiles of students without authorization from school districts, charter schools, teachers, parents, or students.

• School service providers must delete student personal information within a reasonable time if requested by the relevant school entity, unless consent is obtained to retain it or the student transfers to another school that requests retention.

• Violations of restrictions on data collection, use, and sharing constitute unlawful practices enforceable by the Arizona Attorney General; schools may enact additional policies protecting student data.