SB 1486: Public schools; protection of student records and personal information, policies and procedures. - Virginia

Education Substitute → Chaptered · 3 edits

MINOR

This bill transitions SB 1486 from a House substitute version to its final chaptered form, incorporating formatting changes and minor line breaks while maintaining the same substantive policy content regarding student privacy and data protection in Virginia public schools. The core provisions remain unchanged, including definitions of key terms, requirements for data collection practices, prohibitions on targeted advertising, and provisions for data access and deletion.

TECHNICAL

Formatting changes from House substitute format to final chaptered format, including removal of session identifiers and addition of chapter number and approval date.

Line breaks and spacing adjustments throughout the text to conform to final legislative formatting standards.

POLICY

All substantive policy provisions regarding student privacy, data collection, targeted advertising prohibitions, and information security requirements remain identical to the original House substitute version.

Education Subcommittee Substitute → Education Substitute · 3 edits

MINOR

The bill text was reformatted from an Education Subcommittee Substitute to a House Substitute version, with the primary change being the addition of page line numbers and formatting adjustments. The substantive legislative content regarding student privacy, school service provider requirements, and data protection provisions remains unchanged.

Scope change

No substantive change to the bill's scope or applicability; the content is identical to the previous version.

TECHNICAL

Added page line numbers and formatting adjustments to convert from Subcommittee Substitute to House Substitute format.

Changed the date reference from '2/11/2025' to 'February 17, 2025' in the amendment header.

Added bill tracking number '25107089D' and version identifier 'SB1486H1'.

Education and Health Substitute → Education Subcommittee Substitute · 1 edit

MINOR

The bill was amended from a Senate Substitute to an Education Subcommittee Substitute, changing the proposing committee from Senate Committee on Education and Health to House Committee on Education. The substantive policy content regarding student privacy, data collection, and school service provider requirements appears unchanged in the visible portions of the diff.

Scope change

The proposing committee changed from Senate Committee on Education and Health to House Committee on Education, indicating the bill moved to a different legislative committee for consideration.

ELIGIBILITY

The proposing committee was changed from Senate Committee on Education and Health to House Committee on Education, indicating the bill is now being processed through a different legislative committee.

Public Education Substitute Offered → Education and Health Substitute · 5 edits

MODERATE

The bill was resubmitted with a new date (January 30, 2025) and includes extensive formatting changes that add line numbers and draft markings. The substantive policy content regarding student privacy, data collection, and school technology provider requirements appears unchanged from the previous version.

TECHNICAL

Added line numbers and page markers throughout the document for legislative tracking purposes

Changed the offered date from January 26, 2025 to January 30, 2025

Inserted multiple blank lines and spacing adjustments throughout the document

Removed original formatting without line numbers

POLICY

All substantive policy language regarding student privacy, data protection, and school service provider requirements remains identical to the previous version

Enrolled → Public Education Substitute Offered · 1 edit

MINOR

The bill was converted from an Enrolled version to a Substitute Offered version, which is a procedural change in the legislative process rather than a substantive policy change. The text content appears largely unchanged between the two versions, with the main difference being the formatting and header information indicating it is now a Senate substitute amendment offered for consideration on 1/26/2025.

TECHNICAL

Changed the bill status from 'Enrolled' to 'Offered for Consideration' as a Senate Substitute Amendment, indicating it is now in a different stage of the legislative process where it can still be modified or voted on.

Introduced → Enrolled · 6 edits · Mar 21, 2025

MODERATE

The bill was amended and reenacted from its introduced version to its enrolled version, with significant substantive changes to definitions, scope of applicability, and privacy requirements. The enrolled version expands protections to include 'school services' (websites and apps used in schools) beyond just hardware providers, adds new definitions for 'school-affiliated entities' and 'machine-readable format,' and modifies consent requirements and notification timelines. These changes broaden privacy protections to cover a wider range of educational technology interactions while maintaining core student data security provisions.

Scope change

The bill's scope expanded from primarily covering school technology providers (hardware) to also include school service providers (software, websites, and apps), and added protections for school-affiliated entities like booster clubs and parent organizations.

DEFINITION

Added new definitions for 'school service,' 'school-affiliated entity,' 'machine-readable format,' and 'personal profile' to broaden the scope of entities and services covered by privacy protections.

Added definition of 'elementary and secondary school purposes' to clarify when school-related activities fall under the bill's protections.

REQUIREMENT

Changed consent requirements from requiring parent consent for all uses to allowing consent for contract-authorized purposes, and modified the age threshold from 18 years to 'less than 18 years' for consent requirements.

Added new requirement for school service providers to facilitate student access to and correction of their personal information.

Modified notification requirements for data breaches, changing the 24-hour notification timeline to apply only when a breach actually compromises information rather than for all policy violations.

SCOPE

Removed specific prohibitions on monitoring location-tracking and audio/visual features that were in the introduced version, replacing them with broader restrictions on monitoring student interactions.

Public schools; protection of student records and personal information, policies and procedures.

What changed between versions

How they voted

Actions timeline

Sponsors