CT HB07017

Requires all contracts between schools and educational software contractors to include provisions protecting student records as school property, establishing security procedures, and mandating notification within 48 hours of any unauthorized access.

Prohibits contractors from using student records for purposes beyond those authorized in contracts or from using personally identifiable information for advertising purposes.

Requires operators of school-focused websites and applications to prohibit advertising using student information, restrict creation of student profiles, and delete student data upon request while protecting information according to industry standards.

Allows operators to use de-identified student information to improve their services and demonstrate effectiveness, and permits data use in purchase, merger, or acquisition scenarios if the successor operator maintains the same privacy protections.

Permits school boards to disclose "directory information" only when requests are determined to be related to school purposes, effective October 1, 2015.