SB 1209 Summary

• Extends the data governance commission termination date from July 1, 2020 to July 1, 2026, and adds a county school superintendent as a commission member.

• Requires the Department of Education to develop and publicly publish policies and procedures for managing access to student-level data that comply with the Family Educational Rights and Privacy Act.

• Establishes a detailed data security plan requirement including access authorization guidelines, privacy compliance standards, audit procedures, security breach planning, and data retention/destruction criteria.

• Allows county school superintendents, the state board of education, and the state board for charter schools to access student-level data for currently enrolled students within their jurisdiction.

• Requires written agreements for student data disclosure that specify purpose, scope, duration, and mandate destruction of personally identifiable information when no longer needed.