Duty LXD-8499
Serves K-12 schools, in Maine
Dissemination of information: education records and personal information about studentssince 4 lines
20-A M.R.S. sec. 6001 · Read the law's page
- If you are a public school, obtain the written approval of a student's parents before you publish, or provide for publication of, any personal information about the student on the Internet (20-A M.R.S. 6001(2)).when it serves a public body
- If you disseminate a juvenile's education records to a criminal justice agency or to an agency responsible for the juvenile's health or welfare, do so only where the juvenile has not been adjudicated as having committed a juvenile crime, the records are relevant to and disseminated for creating or maintaining an individualized plan for the juvenile's rehabilitation, and an agency that is not a criminal justice agency has given you a statement describing the purpose of the dissemination (20-A M.R.S. 6001(3)).
- If you receive a juvenile's education records under subsection 3, keep them confidential, do not disseminate them further except to the court or as otherwise provided by law, and certify in writing to the school that you will not disclose them to any other party without the written consent of the juvenile or the juvenile's parent or guardian (20-A M.R.S. 6001(3)).for a public body
- Follow the federal Family Educational Rights and Privacy Act and the federal Individuals with Disabilities Education Act when you disseminate education records and personally identifiable information about students (20-A M.R.S. 6001(1)).
Student Information Privacy Act: restrictions on operators of kindergarten to grade 12 school websites, services and applicationssince 4 lines
20-A M.R.S. secs. 951-953 · Read the law's page
- If you operate a website, online service or app that you know is used for kindergarten to grade 12 school purposes and that you designed and marketed for those purposes, do not use student data for targeted advertising, do not use it to amass a profile of a student except for kindergarten to grade 12 school purposes, do not sell it, and do not disclose student personally identifiable information except for a purpose subsection 1, paragraph D lists or subsection 3 permits, unless a student's parent or an eligible student gives explicit written or electronic consent (20-A M.R.S. 953(1)).
- Where you disclose student personally identifiable information to a service provider, bind the provider by contract to use student data only to provide the contracted service to you or on your behalf, to impose the same restrictions on its own service providers, and to implement and maintain reasonable security procedures and practices (20-A M.R.S. 953(1)(D)(6)).
- Implement and maintain reasonable security procedures and practices appropriate to the nature of the student data, to protect it from unauthorized access, destruction, use, modification and disclosure (20-A M.R.S. 953(2)(A)).
- Delete student data within 45 days of a school's or school administrative unit's request (20-A M.R.S. 953(2)(B)).
Student social security numbers: purpose notice, opt-out and deletionsince 2 lines
20-A M.R.S. sec. 6001-C · Read the law's page
- If you are a school administrative unit, a public school or a private school and you request a student's social security number, tell the student's parent or legal guardian (or the student, if 18 or older) what the number will be used for and give them the opportunity to opt out of providing it (20-A M.R.S. 6001-C(1)).
- Delete a student's social security number from the student's records once the student is no longer enrolled in your school administrative unit or school (20-A M.R.S. 6001-C(2)).