School service contract provider - Data transparency

(a) (1) Each school service contract provider shall provide clear information that is understandable by a layperson explaining: (A) The elements of student personally identifiable information that the school service contract provider collects; (B) The purpose for which the school service contract provider collects the student personally identifiable information; and (C) How the school service contract provider uses and shares the student personally identifiable information. (2) The information required under subdivision (a)(1) of this section shall include all student personally identifiable information that the school service contract provider collects regardless of whether it is initially collected or ultimately held individually or in the aggregate. (3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy. (b) A school service contract provider shall: (1) Provide clear notice to each public education entity that it contracts with before making material changes to its privacy policy for school services that would result in a material reduction in the level of privacy and security provided for student personally identifiable information; and (2) Facilitate access to and the correction of any factually inaccurate student personally identifiable information by a contracting local education agency in response to a request for correction that the local education agency receives and to which the local education agency responds. (c) Upon discovering the misuse or unauthorized release of student personally identifiable information held by a school service contract provider, a subcontractor of a school service contract provider, or a subsequent subcontractor of a school service contract provider, the school service contract provider shall notify the contracting public education entity as soon as possible, regardless of whether the misuse or unauthorized release is a result of a material breach of the terms of a contract. Added by Act 2023, No. 754,§ 1, eff. 6/1/2024.

(a) (1) Each school service contract provider shall provide clear information that is understandable by a layperson explaining: (A) The elements of student personally identifiable information that the school service contract provider collects; (B) The purpose for which the school service contract provider collects the student personally identifiable information; and (C) How the school service contract provider uses and shares the student personally identifiable information. (2) The information required under subdivision (a)(1) of this section shall include all student personally identifiable information that the school service contract provider collects regardless of whether it is initially collected or ultimately held individually or in the aggregate. (3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy.

ndividually or in the aggregate. (3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy.

(1) Each school service contract provider shall provide clear information that is understandable by a layperson explaining: (A) The elements of student personally identifiable information that the school service contract provider collects; (B) The purpose for which the school service contract provider collects the student personally identifiable information; and (C) How the school service contract provider uses and shares the student personally identifiable information.

(A) The elements of student personally identifiable information that the school service contract provider collects;

(B) The purpose for which the school service contract provider collects the student personally identifiable information; and

(C) How the school service contract provider uses and shares the student personally identifiable information.

(2) The information required under subdivision (a)(1) of this section shall include all student personally identifiable information that the school service contract provider collects regardless of whether it is initially collected or ultimately held individually or in the aggregate.

(3) A school service contract provider shall: (A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and (B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy.

(A) Provide the information required under subdivision (a)(1) of this section to each public education entity that the school service contract provider contracts with in a format that is easily accessible; and

(B) Update the information required under subdivision (a)(1) of this section as necessary to maintain accuracy.

(b) A school service contract provider shall: (1) Provide clear notice to each public education entity that it contracts with before making material changes to its privacy policy for school services that would result in a material reduction in the level of privacy and security provided for student personally identifiable information; and (2) Facilitate access to and the correction of any factually inaccurate student personally identifiable information by a contracting local education agency in response to a request for correction that the local education agency receives and to which the local education agency responds.

(1) Provide clear notice to each public education entity that it contracts with before making material changes to its privacy policy for school services that would result in a material reduction in the level of privacy and security provided for student personally identifiable information; and

(2) Facilitate access to and the correction of any factually inaccurate student personally identifiable information by a contracting local education agency in response to a request for correction that the local education agency receives and to which the local education agency responds.

(c) Upon discovering the misuse or unauthorized release of student personally identifiable information held by a school service contract provider, a subcontractor of a school service contract provider, or a subsequent subcontractor of a school service contract provider, the school service contract provider shall notify the contracting public education entity as soon as possible, regardless of whether the misuse or unauthorized release is a result of a material breach of the terms of a contract.

Added by Act 2023, No. 754,§ 1, eff. 6/1/2024.