SB 2256

Abstract

Amends the Student Online Personal Protection Act. Provides that "covered information" does not include de-identified or aggregate information from which all personally identifiable information of a student has been removed. Makes conforming changes. Provides that the covered information restrictions shall be included as part of the operator's terms of service agreement, privacy policy, or similar document (instead of requiring that an operator enter into a written agreement with the school, school district, or State Board before the covered information may be transferred) Removes provisions requiring that if the school maintains a website, the operator shall provide a statement that the school must publish the written agreement on the school's website. Makes related changes. Provides that a statement that the operator will implement and maintain reasonable security procedures and practices that otherwise meet or exceed industry standards designed to protect covered information from unauthorized access, destruction, use, modification, or disclosure Provides that the business address of the operator and a link to the terms of service agreement, privacy policy, or similar document shall be provided. Provides that de-identified or aggregate information from which all personally identifiable information of a student has been removed are not prohibited for an operator to use. Removes restrictions prohibiting a school from sharing, transferring, disclosing, or providing access to a student's covered information to an entity or individual. Makes other changes.