An Act amending Title 24 (Education) of the Pennsylvania Consolidated Statutes, in preliminary provisions, providing for student data privacy and protection; conferring powers and imposing duties on the Department of Education; and imposing penalties.
What changed between versions
Expanded the definition of 'educational entity' to explicitly include public school districts, charter schools, regional charter schools, cyber charter schools, intermediate units, and area career and technical schools, whereas the previous version only included public schools and excluded higher education.
Broadened the definition of 'necessary student data' to include data required by both Federal and State law, rather than only Federal law.
Added 'sexual identity or orientation' and 'migrant status' to the list of student data categories that are excluded from the definition of 'personally identifiable student data', providing stronger privacy protections for these groups.
Revised the definition of 'targeted marketing' to explicitly include advertising directed at students' parents or guardians based on the student's online or offline behavior.
Added a new subsection to the notice of disclosure requirements, mandating that the notice must explain the rationale for collecting optional student data.
Inserted a new section titled 'Biometric identifiers' to address the specific handling and protection of biometric data.
