S815 - Student Educational Records Privacy and Security

• Creates new data security requirements for North Carolina's student information system, including publicly available data inventory, privacy compliance rules, and detailed security plan with encryption and breach notification procedures.

• Prohibits collection of biometric information, political affiliation, religion, and voting history in the student data system.

• Restricts access to personally identifiable student data to authorized school personnel, state agencies, students/parents, and specific contractors working under data-sharing agreements.

• Requires local school boards to provide annual written notice to parents about their rights under federal law (FERPA) to inspect records, amend inaccurate information, control disclosure of directory information, and opt out of protected surveys.

• Mandates annual reporting to Governor and General Assembly by October 1 describing new student data collections and changes to existing data systems.