MO HB1873

Establishes the "Missouri Student Data Protection Act" effective beginning 2014-15 school year, requiring informed written consent from parents or guardians before collecting student workforce information, biometric records, affective computing data, psychological assessments, predictive modeling data, religious affiliation information, and certain medical/mental health records.

Prohibits collection of psychological data through classroom assessments or state/national student assessments, and bans school surveys that solicit information about political affiliations, sexual behavior, illegal conduct, religious practices, gun ownership, or privileged relationships without parental consent.

Requires public education agencies and institutions to publicly disclose data system existence, purposes, data categories, disclosure recipients, retention policies, and official contacts on their websites, and provide parents and students printed copies of their educational records upon request.

Restricts access to student and teacher data to authorized staff members only, prohibits disclosure to third parties without written consent except under specified conditions, requires contractors to maintain encryption, conduct annual security audits, report breaches within 48 hours, and destroy data upon contract termination.

Prohibits cloud computing service providers from using student data for marketing or advertising, restricts disclosure of personally identifiable information to federal agencies and out-of-state entities, requires destruction of student records within five years of graduation, and establishes civil penalties of $1,000-$10,000 per violation enforced by the Attorney General.