Bill No.:         SF0079                                               Drafter: DRN

LSO No.:       14LSO-0365                                     Effective Date: Immediate

Enrolled Act No.:    SEA0066

Chapter No.:                        CH0125

Prime Sponsor:       Select Committee on Statewide Education Accountability

Catch Title:              Education-student data security-2.

Subject:                     Requires preparation of a data security plan for student level educational data.

Summary/Major Elements:

· The act requires the department of education and the department of enterprise technology to develop a data security plan to handle student education data.

· The plan must include guidelines for accessing data, compliance standards, requirements for privacy and security audits, breach prevention and notification procedures and data retention and disposition policies.  The plan must also include assurances of compliance with the federal Family Educational Rights and Privacy Act and a prohibition on the sale of student level data.  It also must accommodate collection by students’ Wyoming student record identification and locator number as opposed to any other personally identifiable data.

· The act requires a report to the Joint Education Interim Committee not later than November 1, 2014, regarding the details of the plan.  The report must also include an inventory of all educational data collected, along with any data elements that can be eliminated or mechanisms to improve efficiency of collection.

Comments:

· Report required: November 1, 2014.

· Delayed effective date:  Section 1 is effective July 1, 2014; Section 2 is effective upon resolution of Hill/Powers v. Mead [Docket No. S-13-0052].