CT HB05444

Commission for Educational Technology shall develop a uniform student data privacy terms-of-service agreement addendum for use in contracts between boards of education and contractors, to be made available on the commission's website or online registry.

Contracts between local or regional boards of education and contractors must include ten specific provisions including statements that student data is not contractor property, procedures for data deletion, security safeguards, and notification procedures for unauthorized access.

Student-generated content is owned by the student or parent/legal guardian, and contractors must delete requested student data within a reasonable time unless prohibited by state or federal law or stored as inaccessible disaster recovery backups.

Local and regional boards of education must maintain a website with information on all executed contracts and post contract notices within five business days, including the contract itself, execution date, purpose, and types of student data collected.

Task force studying student data privacy issues shall submit findings and recommendations by January 1, 2019, and local boards must annually report to the Commission for Educational Technology on any internet services used without a required contract.