The proposal would let students and parents request deletion of school data and direct state officials to plan for privacy and send yearly notices.
Students or parents could ask state officials to delete a student's records from the statewide school data system. Officials could keep records needed for specified funding, contract, or legal duties.
State education officials would work with a K-12 task force on data security plans and publish privacy procedures. Students and parents would receive yearly notice of their privacy rights.
A state data board would have to adopt a policy against agencies and school districts using any part of a student's Social Security number as a unique ID.
Students or parents could ask the superintendent of public instruction to delete a student's data from the statewide K-12 system. A student could request deletion of their own data. A parent or legal guardian could request it for a minor. The office would need to verify the student and the request; it could decline if it cannot verify them. Officials would not have to delete data needed to meet state or federal funding laws, fulfill a contract involving another state agency or a third-party vendor, or comply with a court order, subpoena, or other lawful process. Officials would have 45 days after receiving a verified request to delete the data and provide a free copy. They could extend the deadline once by 45 days, or by 90 days after considering the number and complexity of requests, and would have to explain the delay.
The superintendent of public instruction would work with the K-12 data task force on student data security plans, privacy procedures, and notices. These duties concern student privacy and the statewide K-12 data system. The superintendent would consult the task force on required and proposed data in the statewide system, including the reason for proposed data collection. The security plan would cover privacy standards, audits, breach response, and rules for keeping or disposing of data. Officials would publish privacy procedures and notices. The bill sets July 1, 2025, as its proposed effective date. The privacy notice would be sent annually.
The education and workforce data governing board would have to adopt policies barring agencies and school districts from using any part of a student's Social Security number as a unique identifier. The policy would cover the contributing state agencies and school districts named in the text. The restriction would apply to using a Social Security number to identify a student; the text does not bar other uses of the number. The bill sets July 1, 2025, as its proposed effective date.
No hearings or votes scheduled.