Bill > A3147

This bill prohibits cloud computing service providers, which are companies that offer on-demand access to shared computer resources for productivity applications like email and document editing, from disclosing educational records collected or maintained for public, private, or charter schools. Educational records are defined broadly to include any data related to a student's use of these services, such as academic work, attendance, and health information. Providers are only allowed to process or monitor these records to deliver their services and maintain the integrity of those services, and they must certify in writing to the school that they will comply with these restrictions. Violators face civil penalties, with a first offense costing up to $5,000 and subsequent offenses up to $10,000 per violation, and the Commissioner of Education is tasked with creating regulations to implement these provisions.