HF341 Summary: Student Data Privacy Act

• Creates the Student Data Privacy Act by amending Minnesota Statutes section 13.32 to establish new protections for student educational data and define technology providers' obligations.

• Requires technology providers to implement written security procedures, prohibits selling or sharing educational data for commercial purposes, and mandates destruction or return of data within 30 days of contract expiration.

• Mandates schools notify parents and students within 30 days of each school year about all curriculum, testing, and assessment technology providers accessing educational data, with the right to inspect contracts and opt out without penalty.

• Prohibits electronic monitoring of school-issued devices including location tracking, audio/visual recording, and activity monitoring except with student consent for educational purposes, judicial warrant, missing device situations, imminent safety threats, or legal compliance.

• Exempts postsecondary institutions and nonprofit assessment providers offering employment/scholarship opportunities from these restrictions if they obtain express written or digital consent.