Skip to main content Skip to office menu Skip to footer
Capital IconMinnesota Legislature

SF 2291

as introduced - 91st Legislature (2019 - 2020) Posted on 03/11/2019 04:20pm

KEY: stricken = removed, old language.
underscored = added, new language.

Current Version - as introduced

Line numbers 1.1 1.2 1.3 1.4 1.5
1.6 1.7 1.8 1.9 1.10 1.11 1.12 1.13 1.14 1.15 1.16 1.17 1.18 1.19 1.20 1.21 1.22 1.23 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 2.9 2.10 2.11 2.12 2.13 2.14 2.15 2.16 2.17 2.18 2.19 2.20 2.21 2.22 2.23 2.24
2.25
2.26 2.27 2.28 2.29 2.30 2.31 2.32 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.17 3.18 3.19 3.20 3.21 3.22 3.23 3.24 3.25 3.26 3.27 3.28 3.29 3.30 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
4.9
4.10 4.11 4.12 4.13 4.14 4.15 4.16 4.17 4.18 4.19 4.20 4.21 4.22 4.23 4.24 4.25 4.26 4.27 4.28 4.29 4.30 4.31 5.1 5.2 5.3
5.4
5.5 5.6 5.7 5.8 5.9 5.10 5.11 5.12 5.13 5.14 5.15 5.16
5.17

A bill for an act
relating to education; creating the Student Data Privacy Act; providing penalties;
amending Minnesota Statutes 2018, section 13.32, subdivision 1, by adding
subdivisions.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

Section 1.

Minnesota Statutes 2018, section 13.32, subdivision 1, is amended to read:


Subdivision 1.

Definitions.

As used in this section:

(a) "Educational data" means data on individuals new text begin that relates to a student and is new text end maintained
by a public educational agency or institution or by a person acting for new text begin or contracting with
new text end the agency or institution deleted text begin which relates to a studentdeleted text end new text begin , including but not limited to a technology
provider
new text end .

Records of instructional personnel which are in the sole possession of the maker thereof
and are not accessible or revealed to any other individual except a substitute teacher, and
are destroyed at the end of the school year, shall not be deemed to be government data.

Records of a law enforcement unit of a public educational agency or institution which
are maintained apart from education data and are maintained solely for law enforcement
purposes, and are not disclosed to individuals other than law enforcement officials of the
jurisdiction are not educational data; provided, that education records maintained by the
educational agency or institution are not disclosed to the personnel of the law enforcement
unit. The University of Minnesota police department is a law enforcement agency for
purposes of section 13.82 and other sections of Minnesota Statutes dealing with law
enforcement records. Records of organizations providing security services to a public
educational agency or institution must be administered consistent with section 13.861.

Records relating to a student who is employed by a public educational agency or
institution which are made and maintained in the normal course of business, relate exclusively
to the individual in that individual's capacity as an employee, and are not available for use
for any other purpose are classified pursuant to section 13.43.

(b) "Juvenile justice system" includes criminal justice agencies and the judiciary when
involved in juvenile justice activities.

new text begin (c) "Parent" means a parent, guardian, or other person having legal custody of a child
under the age of 18.
new text end

new text begin (d) "School-issued device" means a technological device that a public educational agency
or institution, acting independently or with a technology provider, provides to an individual
student for that student's dedicated personal use. A school-issued device includes a device
issued through a one-to-one program.
new text end

deleted text begin (c)deleted text end new text begin (e)new text end "Student" means an individual currently or formerly enrolled or registered,
applicants for enrollment or registration at a public educational agency or institution, or
individuals who receive shared time educational services from a public agency or institution.

deleted text begin (d)deleted text end new text begin (f)new text end "Substitute teacher" means an individual who performs on a temporary basis the
duties of the individual who made the record, but does not include an individual who
permanently succeeds to the position of the maker of the record.

new text begin (g) "Technology provider" means a person who:
new text end

new text begin (1) contracts with a public educational agency or institution, as part of a one-to-one
program or otherwise, to provide technological devices for student use or to provide access
to a software or online application; and
new text end

new text begin (2) creates, receives, or maintains educational data pursuant or incidental to a contract
with a public educational agency or institution.
new text end

new text begin EFFECTIVE DATE. new text end

new text begin This section is effective for the 2019-2020 school year and later.
new text end

Sec. 2.

Minnesota Statutes 2018, section 13.32, is amended by adding a subdivision to
read:


new text begin Subd. 13. new text end

new text begin Technology providers. new text end

new text begin (a) A technology provider is subject to the provisions
of section 13.05, subdivision 11.
new text end

new text begin (b) All educational data created, received, or maintained by a technology provider
pursuant or incidental to a contract with a public educational agency or institution are not
the technology provider's property.
new text end

new text begin (c) If educational data maintained by the technology provider are subject to a breach of
the security of the data, as defined in section 13.055, the technology provider must, following
discovery of the breach, disclose to the public educational agency or institution all
information necessary to fulfill the requirements of section 13.055.
new text end

new text begin (d) Unless renewal of the contract is reasonably anticipated, within 30 days of the
expiration of the contract, a technology provider must destroy or return to the appropriate
public educational agency or institution all educational data created, received, or maintained
pursuant or incidental to the contract.
new text end

new text begin (e) A technology provider must not sell, share, or disseminate educational data, except
as provided by this section or as part of a valid delegation or assignment of its contract with
a public educational agency or institution. An assignee or delegee that creates, receives, or
maintains educational data is subject to the same restrictions and obligations under this
section as the technology provider.
new text end

new text begin (f) A technology provider must not use educational data for any commercial purpose,
including but not limited to marketing or advertising to a student or parent.
new text end

new text begin (g) A technology provider must establish written procedures to ensure appropriate
security safeguards for educational data. These procedures must require that:
new text end

new text begin (1) the technology provider's employees or contractors have access to educational data
only if authorized; and
new text end

new text begin (2) the technology provider's employees or contractors may be authorized to access
educational data only if access is necessary to fulfill the official duties of the employee or
contractor.
new text end

new text begin These written procedures are public data unless classified as not public data under any other
applicable law.
new text end

new text begin (h) Within 30 days of the start of each school year, a public educational agency or
institution must give parents and students direct, timely notice, by United States mail, e-mail,
or other direct form of communication, of any technology provider contract affecting a
student's educational data. The notice must:
new text end

new text begin (1) identify each technology provider with access to educational data;
new text end

new text begin (2) identify the educational data affected by the technology provider contract; and
new text end

new text begin (3) include information about the contract inspection and, if applicable, the parent or
student's ability to opt out of any program or activity that allows a technology provider to
access a student's educational data.
new text end

new text begin (i) A public educational agency or institution must provide parents and students an
opportunity to inspect a complete copy of any contract with a technology provider.
new text end

new text begin (j) A public educational agency or institution must not penalize or withhold an educational
benefit from a parent or student who opts out of any program or activity that allows a
technology provider to access a student's educational data.
new text end

new text begin EFFECTIVE DATE. new text end

new text begin This section is effective for the 2019-2020 school year and later.
new text end

Sec. 3.

Minnesota Statutes 2018, section 13.32, is amended by adding a subdivision to
read:


new text begin Subd. 14. new text end

new text begin School-issued devices. new text end

new text begin (a) Except as provided in paragraph (b), a government
entity or technology provider must not electronically access or monitor:
new text end

new text begin (1) any location-tracking feature of a school-issued device;
new text end

new text begin (2) any audio or visual receiving, transmitting, or recording feature of a school-issued
device; or
new text end

new text begin (3) student interactions with a school-issued device, including but not limited to
keystrokes and web-browsing activity.
new text end

new text begin (b) A government entity or technology provider may only engage in activities prohibited
by paragraph (a) if:
new text end

new text begin (1) the student to whom the school-issued device was issued initiates and agrees to the
activity, and the activity is limited to a noncommercial educational purpose;
new text end

new text begin (2) the activity is permitted under a judicial warrant;
new text end

new text begin (3) the student to whom the school-issued device was issued or that student's parent
notifies the public educational agency or institution or law enforcement agency that the
device is missing or stolen; or
new text end

new text begin (4) the activity is necessary to respond to an imminent threat to life or safety and the
access is limited to that purpose.
new text end

new text begin (c) If a government entity or technology provider interacts with a school-issued device
as provided in paragraph (b), clause (4), it must, within 72 hours of the access, notify the
student to whom the school-issued device was issued or that student's parent and provide a
written description of the interaction, including which features of the device were accessed
and a description of the threat. This notice is not required if the notice itself would pose an
imminent threat to life or safety.
new text end

new text begin EFFECTIVE DATE. new text end

new text begin This section is effective for the 2019-2020 school year and later.
new text end

Sec. 4.

Minnesota Statutes 2018, section 13.32, is amended by adding a subdivision to
read:


new text begin Subd. 15. new text end

new text begin Application to nonpublic schools; exemption. new text end

new text begin (a) Notwithstanding any law
to the contrary, an accredited nonpublic school recognized by the Council on Nonpublic
Education under section 123B.445, excluding home schools, must comply with subdivisions
13 and 14 as if it were a public educational agency or institution.
new text end

new text begin (b) A technology provider contracting with an accredited nonpublic school recognized
by the Council on Nonpublic Education under section 123B.445, excluding home schools,
must comply with subdivisions 13 and 14 as if that school were a public educational agency
or institution.
new text end

new text begin (c) A postsecondary institution is exempt from subdivisions 13 and 14. This exemption
extends to a technology provider for purposes of a contract with a postsecondary institution.
new text end

new text begin EFFECTIVE DATE. new text end

new text begin This section is effective for the 2019-2020 school year and later.
new text end