Serves K-12 schools, in Oregon

OAR 581-011-0052, accessible instructional materials required · Read the law's page

• If you publish print instructional materials that the Oregon Department of Education buys through an adoption process, procurement contract or other purchase practice, prepare electronic files of their contents using the National Instructional Materials Accessibility Standard (NIMAS) and provide them to the National Instructional Materials Access Center on or before delivery of the print materials; the Department's written contract with you is to require this (OAR 581-011-0052).

ORS 336.184 · Read the law's page

• If you operate an Internet website, online service, online application or mobile application that you know is used primarily for kindergarten through grade 12 school purposes and was designed and marketed for them, do not knowingly engage in targeted advertising on it (ORS 336.184(3)(a)(A)).
• Do not knowingly target advertising on any other site, service or application based on information, including covered information and persistent unique identifiers, you acquired because of the kindergarten through grade 12 use of your service (ORS 336.184(3)(a)(B)).
• Do not use information created or gathered by your service to amass a profile about a student, except in furtherance of kindergarten through grade 12 school purposes (ORS 336.184(3)(a)(C)).
• Do not sell a student's information, including covered information; the bar does not apply to the acquisition of an operator by another entity that continues to be subject to the section (ORS 336.184(3)(a)(D)).
• Do not disclose covered information unless the disclosure is made for the school purposes of the service to a recipient bound to the same limits, to ensure legal compliance, to respond to the judicial process, to protect safety or security, or to a service provider you bind by contract to those limits and to reasonable security (ORS 336.184(3)(a)(E)).
• Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information (ORS 336.184(4)(a)).
• Delete a student's covered information within a reasonable time if the school or school district requests deletion of data under its control (ORS 336.184(4)(b)).

OAR 581-011-0087(6), digital, electronic, or web-based materials and media · Read the law's page

• If you offer digital, electronic or web-based instructional materials to the Oregon State Board of Education for adoption, provide an accessibility conformance report for each electronic component that documents adherence to the Web Content Accessibility Guidelines identified in the circular of information and technical standards required by Section 508 of the Federal Rehabilitation Act (OAR 581-011-0087(6)).
• Have an independent third party prepare each accessibility conformance report, based on an audit that tests a random sampling of each different type of electronic component (OAR 581-011-0087(6)).
• Make the materials accessible consistent with OAR 581-015-2060, 581-022-2355, 581-022-2340, 581-022-2360 and 581-011-0052 and compliant with all state or federal laws regarding accessibility (OAR 581-011-0087(6)).

ORS 326.561, 326.565 · Read the law's page

• Department of Education: develop and implement a standardized method to be used by school districts, education service districts and the department to electronically create, collect, use, maintain, disclose, transfer and access student data from multiple platforms (ORS 326.561(1)).when it serves a public body
• Department of Education: build the method so that it allows the collection of at least the student data types ORS 326.561(3) lists, among them student education records and student medical alerts and other health data necessary for state reporting (ORS 326.561(3)).when it serves a public body
• Department of Education: ensure during the transition to the method that the integrity and security of student data is maintained (section 2(4)(a), chapter 567, Oregon Laws 2025).when it serves a public body
• State Board of Education: adopt by rule standards for the creation, collection, use, maintenance, disclosure, transfer and access of student education records held by a school district or another public or private educational entity that provides educational services to students in any grade from kindergarten through grade 12 (ORS 326.565(1)).for a public body
• School districts: make the student education records rules the Board adopts available to the public schools in the district and to the public (ORS 326.565(3)).for a public body

OAR 581-021-0250, 581-021-0260 · Read the law's page

• Adopt a written policy on how you meet the student education records rules (OAR 581-021-0220 through 581-021-0430), covering the annual notice, how a parent or eligible student may inspect and review records, the consent rule and its exceptions, the record of disclosures, directory information and correction of records, and make a copy available on request (OAR 581-021-0250(1) and (3)).
• State in that policy that personally identifiable information will not be released from an education record without the prior written consent of the parent or eligible student, except under the listed conditions (OAR 581-021-0250(1)(c)).
• Notify parents and eligible students currently in attendance, every year, of their rights to inspect and review the student's education records, to request amendment of them, to consent to disclosures of personally identifiable information, to file a complaint with the U.S. Department of Education and to obtain a copy of the policy (OAR 581-021-0260(1) and (2)).
• Include in the annual notice the procedures for inspecting records and requesting amendment, the criteria for who is a school official with a legitimate educational interest, what you treat as directory information, and where copies of the policy are located (OAR 581-021-0260(3), (4) and (6)).
• Notify parents who have a primary or home language other than English, and parents or eligible students who have a disability, in a way that reaches them effectively (OAR 581-021-0260(8) and (9)).

OAR 581-021-0270, 581-021-0280, 581-021-0300 to 581-021-0320 · Read the law's page

• Let a parent, an eligible student, or a representative a parent authorizes in writing inspect and review the student's education records, answer reasonable requests for explanations and interpretations, and comply within a reasonable time and in no case more than 45 days after the request (OAR 581-021-0270(1) to (3)).
• Do not charge a fee to search for or to retrieve a student's education records, and do not destroy any education records while a request to inspect and review them is outstanding (OAR 581-021-0280(3) and OAR 581-021-0270(5)).
• Decide within a reasonable time whether to amend a record a parent or eligible student says is inaccurate, misleading or in violation of the student's rights, and if you decline, tell them of the decision and of their right to a hearing (OAR 581-021-0300(2) and (3)).
• On request, hold a hearing within a reasonable time, before a decision-maker with no direct interest in the outcome, give notice of its date, time and place, let the parent or eligible student present evidence and be assisted or represented, and decide in writing on the evidence presented, with a summary of the evidence and the reasons (OAR 581-021-0310(1) and OAR 581-021-0320(1) to (6)).
• If the hearing shows the information is inaccurate, misleading or in violation of the student's rights, amend the record and tell the parent or eligible student in writing; if not, tell them they may place a statement in the record, keep it with the contested part and disclose it whenever that part is disclosed (OAR 581-021-0310(2) to (4)).

OAR 581-021-0330, 581-021-0340, 581-021-0350 · Read the law's page

• Obtain a signed and dated written consent from the parent or eligible student, specifying the records to be disclosed, the purpose and the party or class of parties, before you disclose personally identifiable information from a student's education records, unless an exception in OAR 581-021-0340 applies; a record and signature in electronic form that identifies and authenticates the person and indicates approval counts (OAR 581-021-0330(1) to (3)).
• Obtain a parent's consent before personally identifiable information about a child enrolled or going to enroll in a private school outside the child's resident school district is released between officials of the district where the private school is located and the resident district (OAR 581-021-0330(4)).
• Disclose without consent only where the disclosure meets one of the conditions in OAR 581-021-0340, such as a disclosure to school officials and teachers with a legitimate educational interest or to officials of a school where the student seeks or intends to enroll, is enrolled or receives services (OAR 581-021-0340(1) and (2)).
• Disclose personally identifiable information from an education record only on the condition that the receiving party will not disclose it to any other party without the prior consent of the parent or eligible student, and tell the receiving party of that requirement where it applies (OAR 581-021-0350(1) and (4)).
• If the Family Policy Compliance Office finds that a third party improperly redisclosed personally identifiable information from education records, do not allow that third party access to such information for at least five years (OAR 581-021-0350(5)).

OAR 581-021-0360, 581-021-0370, 581-021-0390 · Read the law's page

• When you disclose a student's education record under OAR 581-021-0340(2) to officials of another school or school system where the student seeks or intends to enroll, annually notify parents or eligible students that you forward education records requested under OAR 581-021-0250(1)(m) and (p) within 10 days of receiving the request (OAR 581-021-0360(1)(a)).
• Make a reasonable attempt to notify the parent or eligible student at the last known address of that disclosure, unless the parent or eligible student initiated it or your annual notification says that you forward education records to other agencies or institutions that have requested them and in which the student seeks or intends to enroll (OAR 581-021-0360(1)).
• On request, give the parent or eligible student a copy of the record that was disclosed to the other school and an opportunity for a hearing (OAR 581-021-0360(1)).
• If you are an official listed in OAR 581-021-0340(3) (an authorized representative of the Comptroller General of the United States, the Secretary of the U.S. Department of Education, a state or local educational authority or the Oregon Secretary of State's Audit Division) and collect information from education records for an audit or evaluation of federal or state supported education programs, protect it so that no one except those officials can personally identify individuals, and destroy it when it is no longer needed for those purposes, unless the parent or eligible student gave written consent or state or federal law specifically authorizes the collection (OAR 581-021-0370(2) and (3)).
• Disclose directory information only after giving annual public notice, to parents of students in attendance and eligible students in attendance, of the types of information you designate as directory information, the right to refuse that designation, and the period of time within which a parent or eligible student must notify you in writing (OAR 581-021-0390(1)).

OAR 581-021-0400 · Read the law's page

• Keep, with each student's education records and for as long as those records are maintained, a record of each request for access to and each disclosure of personally identifiable information from them, naming the parties who requested or received it, the date access was given and the legitimate interests they had (OAR 581-021-0400(1)).
• Where you disclose with the understanding that the receiving party may make further disclosures on your behalf, add to the record the names of the additional parties and the legitimate interests each has (OAR 581-021-0400(2)).
• Let the parent or eligible student, the school official responsible for the custody of the records and the parties authorized to audit your recordkeeping inspect the record for each student; you need not record requests from or disclosures to the parent or eligible student, a school official, a party with written consent or a party seeking directory information (OAR 581-021-0400(3) and (4)).

ORS 326.575 · Read the law's page

• Within 10 days of a student's seeking initial enrollment, notify the school or program in which the student was formerly enrolled and request the student's education records (ORS 326.575(1)).
• When another school requests a student's education records, transfer all of them, including any the education service district retains, no later than 10 days after the request; for a student in a substitute care program the request and the transfer are due within five days (ORS 326.575(2), (3)).
• Annually notify parents and eligible students of their right to review and propose amendments to the student's education records (ORS 326.575(4)).
• If a parent's or eligible student's proposed amendment is rejected, give the parent or eligible student a hearing on the matter (ORS 326.575(4)).