HF1821 Summary: Student Data Privacy Act

• Creates comprehensive definitions for educational data, technology providers, school-issued devices, and related terms, effective for the 2020-2021 school year and later.

• Prohibits technology providers from selling, sharing, or disseminating student educational data; using data for commercial purposes including marketing; and requires written security procedures limiting employee access to authorized educational purposes only.

• Requires public educational agencies to provide parents and students direct notice within 30 days of each school year identifying curriculum, testing, or assessment technology providers with data access, and must allow inspection of contracts and opt-out without penalty.

• Prohibits government entities and technology providers from electronically monitoring school-issued devices' location, audio/visual features, or student interactions, except with student/parent consent for noncommercial education, judicial warrant, device theft reports, or imminent threats to life or safety.

• Requires technology providers to destroy or return all educational data within 30 days of contract expiration (unless renewal anticipated) and to disclose breach information to schools within defined timelines; applies requirements to accredited nonpublic schools but exempts postsecondary institutions.