MO HB1157

State Board of Education must adopt rules requiring the Department of Elementary and Secondary Education to create and publicly share a data inventory defining all student data fields collected in the statewide longitudinal data system.

Access to personally identifiable student data is restricted to authorized department staff, contractors, district administrators, teachers, school personnel, students and parents, and other state agencies as required by law with data-sharing agreements.

Department must develop a comprehensive data security plan including authentication guidelines, privacy compliance standards, security audits, breach procedures, data retention policies, and electronic, physical, and administrative safeguards including encryption and employee training.

Private vendors with contracts involving student data must include express provisions prohibiting the sale of student data, prohibiting use for advertising purposes, and including penalties for noncompliance.

Department is prohibited from collecting or allowing school districts to report juvenile delinquency records, criminal records, student biometric information, political affiliation, or religion; department must annually notify the governor and general assembly of new or changed student data collections.