MT HB255

School districts may use model contracts approved by private or public consortiums for third-party K-12 online application operators, provided the contracts meet or exceed state privacy requirements

Contracts with third-party providers must ensure pupil records remain school district property, prohibit use of data beyond contract purposes, and ban targeted advertising using student information

Third parties must delete pupil records upon contract completion, notify parents/guardians of data breaches, and describe procedures for parents to review and correct their child's personally identifiable information

Students retain the right to maintain control of their own generated content and may transfer it to personal accounts

Noncompliant contracts become void after notice and opportunity to cure, requiring all parties to return pupil records to the school district