HI HB613

Computer service providers cannot process student data except to provide, improve, develop, or maintain their computer-based service without express written permission from the student's parent.

Computer service providers are prohibited from selling, disclosing, or processing student data for commercial or advertising purposes.

Computer service providers may process student data to assist the Department of Education in conducting educational research as permitted by the Family Educational Rights and Privacy Act of 1974.

Computer service providers entering into agreements with the Department of Education must certify in writing that they will comply with these restrictions.

"Student data" includes any identifying information such as name, email address, postal address, phone number, and documents or photos relating to a student.