15-1045. Education database; pupil
privacy


A. Any collection, maintenance or disclosure of pupil educational records compiled
by the department of education in an education database of pupil records shall comply
with the family educational rights and privacy act (20 United States Code section 1232g).


B. The department of education shall maintain the database in the following manner:


1. The use of the information is limited to comply with statutory obligations.


2. Personally identifiable information is confidential and is not public record.


3. Proper security measures are employed to ensure the confidentiality and
integrity of the education database.


4. Data is secured from breaches and identity theft through implementation of
protections and standards.


C. The pupil identifier in the education database is unique, not identifiable by
anyone other than officials maintaining the education database and shall not be the
pupil's social security number or any variation of the pupil's social security number.