§ 15-1045 — Education database; pupil privacy

A. Any collection, maintenance or disclosure of pupil educational records compiled by the department of education in an education database of pupil records shall comply with the family educational rights and privacy act (20 United States Code section 1232g).

B. The department of education shall maintain the database in the following manner:

1. The use of the information is limited to comply with statutory obligations.

2. Personally identifiable information is confidential and is not public record.

3. Proper security measures are employed to ensure the confidentiality and integrity of the education database.

4. Data is secured from breaches and identity theft through implementation of protections and standards.

C. The pupil identifier in the education database is unique, not identifiable by anyone other than officials maintaining the education database and shall not be the pupil's social security number or any variation of the pupil's social security number.