Bill > S2189

This bill prohibits cloud computing service providers, which are companies offering services like email and document storage to schools, from sharing sensitive student information, referred to as "educational records," with anyone other than authorized school personnel or the student themselves. These educational records include a wide range of data, from attendance and academic performance to health information and disciplinary status. Cloud providers must certify in writing that they will comply with these restrictions and can only use this data to provide and maintain their services for the school. Violators face significant civil penalties, with fines increasing for repeat offenses, and the Commissioner of Education is tasked with creating regulations to ensure the bill's implementation.