H632 - Student Online Protection Act. (SL 2016-11)

Overview: S.L. 2016-11 (HB 632) creates a new statute governing the privacy protection of student information held by operators of third-party online educational websites, services, or applications (operators) for K-12 students in a charter school, regional school, or school operated by a local board of education.

Operators are required to:

• Implement and maintain reasonable security procedures and practices to protect covered student information.
• Delete a student's covered information within 45 days if the school or local board of education requests the deletion, unless written consent is provided for the operator to maintain the information.

Operators may use and disclose personally identifiable information in certain circumstances.

Operators are prohibited from:

• Engaging in targeted advertising based on any information acquired because of the use of the operator's site, service, or application.
• Using information to create a profile about a student except for a K-12 school purpose.
• Renting or selling information, except under permissible circumstances.
• Disclosing covered information, except under permissible circumstances.

This act becomes effective October 1, 2016.