| |
| |
|
|
A BILL TO BE ENTITLED
|
|
|
AN ACT
|
|
|
relating to restricting the use of personally identifiable student |
|
|
information by an operator of a website, online service, online |
|
|
application, or mobile application used for a school purpose. |
|
|
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: |
|
|
SECTION 1. Section 32.155, Education Code, is amended to |
|
|
read as follows: |
|
|
Sec. 32.155. PROTECTION OF COVERED INFORMATION. (a) An |
|
|
operator must implement and maintain reasonable security |
|
|
procedures and practices designed to protect any covered |
|
|
information from unauthorized access, deletion, use, modification, |
|
|
or disclosure. |
|
|
(b) The agency and any operator that possesses any covered |
|
|
information must use the unique identifier system established by |
|
|
the Texas Student Data System (TSDS) or a successor data management |
|
|
system maintained by the agency for any account creation, data |
|
|
upload, data transmission, analysis, or reporting to mask all |
|
|
personally identifiable student information. Any operator |
|
|
conducting business with the agency or a school district, |
|
|
open-enrollment charter school, regional education service center, |
|
|
or other local education agency shall adhere to a state required |
|
|
student data sharing agreement that includes an established data |
|
|
masking standard for all operators as prescribed by the agency. |
|
|
SECTION 2. This Act takes effect September 1, 2019. |