CT HB07207

Delays the effective date for student data privacy contract requirements from October 1, 2016 to July 1, 2018 for contracts between boards of education and contractors handling student information and records

Requires written contracts that include provisions establishing student data ownership, deletion procedures, confidentiality safeguards, notification procedures for data breaches, and compliance with federal privacy laws

Mandates boards of education notify students and parents within two business days (changed from 48 hours) of a data breach involving student information, records, or student-generated content

Prohibits contractors from using student data for purposes beyond those authorized in the contract or for targeted advertising based on personally identifiable information

Establishes a task force to study student data privacy issues including deletion policies, parental notification procedures, enforcement penalties, data security training, and creation of district approval lists for software applications and websites