Senate Bill 79 - Student Data Privacy Protection Act

• Amends Delaware Code § 4111 to establish comprehensive policies for collecting, using, and protecting student data while ensuring privacy rights are maintained by schools, districts, and the Department of Education.

• Requires the Department of Education to create data inventories, conduct privacy impact assessments, perform security audits, respond to privacy complaints, and provide annual reports to the General Assembly on student data handling and any privacy violations.

• Prohibits schools from collecting or reporting certain sensitive data including juvenile delinquency records, criminal records, medical records, political affiliation, voting history, and religious beliefs unless required by law or in health/safety emergencies.

• Establishes duties for third-party operators of K-12 internet services: implement security procedures, delete data within 45 days upon request, prohibit targeted advertising based on student data, ban student data sales, and limit disclosures except for K-12 purposes or legal requirements.

• Grants parents and eligible students rights to inspect education records, request electronic copies, correct inaccurate information, and file privacy complaints with schools; requires Department to establish notification and appeal procedures.