Education-student data security.

WORKING DRAFT
2014
STATE OF
WYOMING
14LSO-0160

SENATE FILE
NO.

SF0036

Education-student data security.

Sponsored by:
Select Committee on Statewide Education Accountability

A BILL

for

AN ACT relating to
education; requiring a data security plan for education data; accordingly imposing duties;

requiring reporting;
and providing for an effective date.

Be It Enacted by the Legislature of the State of Wyoming:

Section 1.

W.S. 21
‑
2
‑
202(
a)(xxxiv) is amended to read:

21
‑
2
‑
202.

Duties of the director.

(a)

In addition to any other duties assigned by law, the director shall:

(xxxiv)

With the
department of enterprise
technology
services
, establish criteria for the collection,
storage, management and reporting of department of education data related to teacher certification
, statewide education accountability and assessment
and the administration of the school finance system.

In carrying out this paragraph, the director and the department of enterprise technology services shall develop a data security plan that includes:

(A)

Guidelines for authorizing access to student data, including authentication of authorized access;

(B)

Privacy compliance standards;

(C)

Privacy and security audits;

(D)

Breach planning, notification and procedures pertaining thereto;

(E)

Data retention and disposition policies;

(F)

Data security policies including electronic, physical and administrative safeguards such as data encryption and employee training;

(G)

Routine and ongoing compliance with the federal
Family Educational Rights
a
nd Privacy Act
(FERPA) and other privacy laws and policies
; and

(H)

Prohibition of the sale of student data to private entities or organizations.

Section 2.

On or before November 1, 2014, the director of the department of education and the director of enterprise technology services shall report to the joint education interim committee on the development and implementation of the data security plan required under this act.

Section 3.

This act is effective July 1, 2014.

(END)

1
SF0036