STUDENT ONLINE PROTECTION

Creates the Student Online Personal Protection Act of 2019. Provides for legislative intent and definitions. Provides for operator prohibitions, operator duties, school authority prohibitions, school authority duties, State Board of Education duties, and parent rights. Creates the Student Data Protection Oversight Committee and provides for the Committee's membership and support. Requires the Committee to submit an annual report to the General Assembly and the State Board of Education with recommendations, if any, for policy revisions and legislative amendments that would carry out the intent of the Act. Amends the Illinois School Student Records Act. Adds a definition of record. Requires written consent of a student's parent to publish student directories that list student names, addresses, and other identifying information and similar publications. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Repeals the Student Online Personal Protection Act. Effective immediately. House Floor Amendment No. 3 Deletes reference to: New Act 105 ILCS 10/2 105 ILCS 10/6 105 ILCS 85/Act rep. 815 ILCS 505/2Z Adds reference to: 105 ILCS 85/5 105 ILCS 85/10 105 ILCS 85/15 105 ILCS 85/26 new 105 ILCS 85/27 new 105 ILCS 85/28 new 105 ILCS 85/33 new Replaces everything after the enacting clause. Amends the Student Online Personal Protection Act. Defines "breach", "longitudinal data system", "parent", and "student". Adds to an operator's duties. Provides for school prohibitions and duties and the State Board of Education's duties. Provides for parent and student rights. Makes other changes. Effective July 1, 2021. Senate Committee Amendment No. 1 Adds reference to: 105 ILCS 85/30 Replaces everything after the enacting clause. Reinserts the provisions of the engrossed bill with the following changes. Changes the definition of "breach". Adds and makes changes to an operator's duties and a school's duties. Provides that at least once (rather than twice) annually, the State Board of Education must publish and maintain on its website a list of all of the entities or individuals that the State Board contracts with or has agreements with and that hold covered information and a copy of each contract or agreement. Provides that the Student Online Personal Protection Act does not prohibit an operator or school from producing and distributing, free or for consideration, student class photos and yearbooks to the school, students, parents, or individuals authorized by parents and to no others, in accordance with the terms of a written agreement between the operator and the school. Effective July 1, 2021. Senate Floor Amendment No. 3 Replaces everything after the enacting clause. Reinserts the provisions of the engrossed bill as amended by Senate Amendment No. 1 with the following changes. Provides that certain information that is required to be posted on a school's website must be made available at a school's administrative office for inspection by the general public if the school does not maintain a website. Provides that a school may omit from its list of breaches of covered information any breach in which the date, estimated date, or estimated date range in which it occurred is earlier than July 1, 2021 or any breach previously posted on a list no more than 5 years prior to the school updating the current list. Provides that a notice of breach may be delayed if an appropriate law enforcement agency determines that the notification will interfere with a criminal investigation and provides the school with a written request for a delay of notice. Allows the State Board of Education to share, transfer, disclose, or provide covered information to its employees or officials acting within their official capacity. Removes a provision stating that a student's covered information is the sole property of the student's parent. Makes changes to a parent's and student's rights. Makes other changes. Effective July 1, 2021.