Duty LXD-8495
Serves K-12 schools, in Kansas
Student Data Privacy Act, enforcementsince 0 lines
K.S.A. 72-6317 · Read the law's page
- Expect a violation of the Student Data Privacy Act to be enforced by the Attorney General or a district attorney seeking injunctive relief, never by a private plaintiff.
Student Data Privacy Act, breach notice for student datasince 2 lines
K.S.A. 72-6318 · Read the law's page
- Immediately notify the affected Kansas student, or the student's parent or guardian, of a breach or unauthorized disclosure of student data if your entity has access to that data.
- Investigate the causes and consequences of a breach or unauthorized disclosure of Kansas student data (K.S.A. 72-6318).
Student Online Personal Protection Act, operator dutiessince 6 lines
K.S.A. 72-6333 · Read the law's page
- If your website, online service or app is used primarily, and was designed and marketed, for educational purposes and you know it, do not knowingly engage in targeted advertising on it, and do not target advertising on another educational online product using student information or persistent unique identifiers you acquired through it (section 72-6333(a)(1)).
- Do not knowingly use student information or persistent unique identifiers from the product to amass a profile about a student, except in furtherance of educational purposes (section 72-6333(a)(2)).
- Do not knowingly sell or rent student information to a third party, except as part of the assets transferred when another entity buys or merges with you, in which case the successor must comply as though it were an operator (section 72-6333(a)(3)).
- Disclose student information only for the purposes section 72-6333(a)(4) lists, and when you disclose it to a service provider, bind the provider by contract not to use it for any other purpose, not to disclose it to later third parties, and to maintain reasonable security procedures and practices (section 72-6333(a)(4)(E)).
- Implement and maintain reasonable security procedures and practices appropriate to the nature of the student information (section 72-6333(b)(1)).
- Delete student information within a reasonable period of time when the school district asks, unless the student or the student's parent or legal guardian asks that it be kept (section 72-6333(b)(2)).