SF2307 - Student Data Privacy Act

• Creates the Student Data Privacy Act by amending Minnesota Statutes section 13.32 with new definitions and restrictions on technology providers handling educational data.

• Establishes that educational data created, received, or maintained by technology providers through contracts with schools is not the provider's property and cannot be sold, shared, or used for commercial purposes including marketing or advertising.

• Requires technology providers to destroy or return all educational data within 90 days of contract expiration, establish written security safeguards, and disclose all information to schools if a data breach occurs.

• Prohibits electronic access or monitoring of school-issued devices' location-tracking, audio/visual features, and student interactions unless necessary for noncommercial educational purposes, judicial warrants, security threats, legal compliance, or federal funding programs.

• Requires schools to notify parents and students within 30 days of each school year about curriculum and assessment technology provider contracts, identify affected educational data, and provide parents and students opportunity to inspect contracts; effective for 2022-2023 school year and later.