The Student Data Privacy and Protection Act
December 7, 2018 03:35 PM to All Senate Members
Circulated By
Senator Kristin Phillips-Hill
R Senate District 28
Memo
In the near future I will be re-introducing House Bill 1345 of last session that aims to protect the privacy of our students’ personal data from unauthorized or inappropriate disclosure. A few examples of harm resulting from unauthorized or inappropriate use include: students’ personal information posted on-line; health care providers inappropriately accessing student information for the purpose of marketing services to parents; and a school district in Pennsylvania installing laptop tracking software which was used to surreptitiously capture images of students in their homes.
Introduction of computers into our school systems, along with new educational technologies and Federal reporting mandates, have dramatically increased the amount of student-related data being generated, collected, and stored within our schools. Computer-related technology to facilitate personalized learning, target instruction based on identified needs, and evaluate instructional methods have proven to be very useful. Yet at the same time these advances have increased the risks to students and their parents of inappropriate access to, and disclosure of, a student’s personal information.
While Congress has made a start in addressing student data privacy concerns through the Family Educational Rights and Privacy Act (FERPA) and subsequent legislation, both state and federal statutory protections have not kept pace with student data privacy concerns generated by introduction of new computer adaptive technologies. Federal student privacy laws do not apply to a significant amount of student data that our schools amass, and may not apply to student information that private companies collect and maintain in support of our schools.
This bill addresses these concerns and provides a solid foundation for protecting the privacy of student data in the Commonwealth. The bill defines student data, who owns the data, who can correct records, the responsibilities of state and local education entities in protecting student data privacy, and the designation and responsibilities of a chief data privacy officer within the Department of Education. Moreover, the bill provides policies and protections for the collection, use and safeguarding of student data; specific prohibitions on collection, reporting, and use of certain data; disclosure guidance; procedures to follow in case of a security breach; third party responsibilities; and enforcement and penalty provisions.
Please join me in sponsoring this legislation to protect our student’s data and their privacy.
Introduction of computers into our school systems, along with new educational technologies and Federal reporting mandates, have dramatically increased the amount of student-related data being generated, collected, and stored within our schools. Computer-related technology to facilitate personalized learning, target instruction based on identified needs, and evaluate instructional methods have proven to be very useful. Yet at the same time these advances have increased the risks to students and their parents of inappropriate access to, and disclosure of, a student’s personal information.
While Congress has made a start in addressing student data privacy concerns through the Family Educational Rights and Privacy Act (FERPA) and subsequent legislation, both state and federal statutory protections have not kept pace with student data privacy concerns generated by introduction of new computer adaptive technologies. Federal student privacy laws do not apply to a significant amount of student data that our schools amass, and may not apply to student information that private companies collect and maintain in support of our schools.
This bill addresses these concerns and provides a solid foundation for protecting the privacy of student data in the Commonwealth. The bill defines student data, who owns the data, who can correct records, the responsibilities of state and local education entities in protecting student data privacy, and the designation and responsibilities of a chief data privacy officer within the Department of Education. Moreover, the bill provides policies and protections for the collection, use and safeguarding of student data; specific prohibitions on collection, reporting, and use of certain data; disclosure guidance; procedures to follow in case of a security breach; third party responsibilities; and enforcement and penalty provisions.
Please join me in sponsoring this legislation to protect our student’s data and their privacy.
Legislation
Document - Introduced as SB 797
The Student Data Privacy and Protection Act
December 7, 2018 03:35 PM to All Senate Members
Circulated By
PHILLIPS-HILL
Memo
In the near future I will be re-introducing House Bill 1345 of last session that aims to protect the privacy of our students’ personal data from unauthorized or inappropriate disclosure. A few examples of harm resulting from unauthorized or inappropriate use include: students’ personal information posted on-line; health care providers inappropriately accessing student information for the purpose of marketing services to parents; and a school district in Pennsylvania installing laptop tracking software which was used to surreptitiously capture images of students in their homes.
Introduction of computers into our school systems, along with new educational technologies and Federal reporting mandates, have dramatically increased the amount of student-related data being generated, collected, and stored within our schools. Computer-related technology to facilitate personalized learning, target instruction based on identified needs, and evaluate instructional methods have proven to be very useful. Yet at the same time these advances have increased the risks to students and their parents of inappropriate access to, and disclosure of, a student’s personal information.
While Congress has made a start in addressing student data privacy concerns through the Family Educational Rights and Privacy Act (FERPA) and subsequent legislation, both state and federal statutory protections have not kept pace with student data privacy concerns generated by introduction of new computer adaptive technologies. Federal student privacy laws do not apply to a significant amount of student data that our schools amass, and may not apply to student information that private companies collect and maintain in support of our schools.
This bill addresses these concerns and provides a solid foundation for protecting the privacy of student data in the Commonwealth. The bill defines student data, who owns the data, who can correct records, the responsibilities of state and local education entities in protecting student data privacy, and the designation and responsibilities of a chief data privacy officer within the Department of Education. Moreover, the bill provides policies and protections for the collection, use and safeguarding of student data; specific prohibitions on collection, reporting, and use of certain data; disclosure guidance; procedures to follow in case of a security breach; third party responsibilities; and enforcement and penalty provisions.
Please join me in sponsoring this legislation to protect our student’s data and their privacy.
Introduction of computers into our school systems, along with new educational technologies and Federal reporting mandates, have dramatically increased the amount of student-related data being generated, collected, and stored within our schools. Computer-related technology to facilitate personalized learning, target instruction based on identified needs, and evaluate instructional methods have proven to be very useful. Yet at the same time these advances have increased the risks to students and their parents of inappropriate access to, and disclosure of, a student’s personal information.
While Congress has made a start in addressing student data privacy concerns through the Family Educational Rights and Privacy Act (FERPA) and subsequent legislation, both state and federal statutory protections have not kept pace with student data privacy concerns generated by introduction of new computer adaptive technologies. Federal student privacy laws do not apply to a significant amount of student data that our schools amass, and may not apply to student information that private companies collect and maintain in support of our schools.
This bill addresses these concerns and provides a solid foundation for protecting the privacy of student data in the Commonwealth. The bill defines student data, who owns the data, who can correct records, the responsibilities of state and local education entities in protecting student data privacy, and the designation and responsibilities of a chief data privacy officer within the Department of Education. Moreover, the bill provides policies and protections for the collection, use and safeguarding of student data; specific prohibitions on collection, reporting, and use of certain data; disclosure guidance; procedures to follow in case of a security breach; third party responsibilities; and enforcement and penalty provisions.
Please join me in sponsoring this legislation to protect our student’s data and their privacy.
Document
Introduced as SB 797
Generated 03/21/2025 10:05 PM