HB0810 Summary

• Adds new Sections 22-80 and 22-81 to the School Code establishing comprehensive student data privacy and educator data privacy protections, prohibiting vendors from using student and educator data for targeted advertising, selling data, storing data outside the U.S., or creating unauthorized profiles.

• Requires vendors receiving student or educator data to enter written contracts with school boards containing specific provisions about data use, security safeguards, data deletion procedures, and dispute resolution using Illinois law and circuit court venue.

• Mandates vendors implement commercial best practices for data security, immediately notify school boards of security breaches, permit data access and correction by students/educators, and reimburse schools for all costs of investigating and remediating breaches including notification, credit monitoring, and legal fees.

• Voids any contracts that fail to comply with these requirements after notice and opportunity to cure; vendors must return all data within 60 days and forfeit all payments if they fail to cure defects.

• Amends the Illinois School Student Records Act to add definitions for biometric records, eligible students, and personally identifiable information; establishes requirements for research institutions accessing student records including data use agreements, notification to parents, and security safeguards consistent with federal Family Educational Rights and Privacy Act standards.