Student Data Accessibility, Transparency and Accountability Act of 2014

• Establishes the executive office of the State Board of Education as the responsible entity for implementing student data protections and requires annual publication of a data inventory and dictionary defining all student data elements currently collected.

• Requires the State Board of Education to develop and publish policies restricting access to student data to authorized staff, district personnel, students/parents, and other state agencies as required by law, with public reports limited to aggregate data only.

• Prohibits private vendors from using student data for secondary purposes (sales, marketing, advertising) unless districts obtain express parental consent, with civil penalties up to $50,000 per violation for non-compliance.

• Prohibits transfer of confidential student data outside Idaho with limited exceptions for out-of-state transfers, higher education attendance, voluntary program participation, vendor contracts, and migrant students.

• Requires the State Board to develop a detailed data security plan covering access authorization, administrative safeguards, encryption, staff training, privacy audits, breach procedures, and data retention policies.

• Mandates school districts annually notify the governor and legislature of new provisional student data collections, which expire after one legislative session without approval, and requires adoption of a state model policy for data governance.