An Act To Safeguard Students' Personal and Private Information
Sec. 1. 20-A MRSA c. 221, sub-c. 1-A is enacted to read:
PROTECTION OF STUDENTS' PERSONAL AND PRIVATE DATA
§ 6011. Definitions
As used in this subchapter, unless the context otherwise indicates, the following terms have the following meanings.
§ 6012. Restrictions on maintenance and disclosure
§ 6013. Violations
§ 6014. Effective date; application
This subchapter takes effect July 1, 2016 and applies to school years beginning with the 2016-2017 academic year.
This bill establishes data privacy practices for the Department of Education and school administrative units. It prohibits the department and school administrative units from disclosing personally identifiable information about students without the written consent of the parents of children under 18 years of age and the written consent of the students themselves when the students are at least 18 years of age. There are specific exceptions to the prohibitions. The bill also prohibits the collection, entry and maintenance of certain information about students and their families. A contractor, consultant or other party that has entered into a contract or other agreement with the department or a school administrative unit who violates the restrictions is subject to a $5,000 civil penalty per violation and disqualification from future access to education records.