Law / United States / Arkansas

Arkansas Higher Education Information System: protection of student personally identifiable information

Ark. Code Ann. sec. 6-60-902 (Act 1195 of 2011, as amended by Act 910 of 2019)

In force since .

A sensitive categories rule binding government bodies.

Instrument type
an act of a legislature
Obligation class
Security, Governance
Audit expectation
none

What it requires

  • If you are the state agency that maintains the Arkansas Higher Education Information System, when you give the Bureau of Legislative Research read-and-report-only access to the data warehouse, take reasonable precautions, including electronic blocking or redacting, to prevent disclosure of a student's personally identifiable information unless the student, or the parent or guardian of a minor student, consents in writing (Ark. Code Ann. sec. 6-60-902(b)(2)(A)(i)).
  • Take the same precautions to prevent disclosure of information that would cause you to lose funding under section 1232g of title 20 of the United States Code (sec. 6-60-902(b)(2)(A)(ii)).
  • Develop the method of redaction with the state's elementary and secondary education agency, based on that agency's standards (sec. 6-60-902(b)(2)(B)(i)).

These lines are LexLint's reading of the law's text.

What record it asks for

Logging duty

The section requires the state higher-education agency to redact student personally identifiable information when it gives the legislative research bureau access to the data warehouse. It names no log or record and no reader of one.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

The state agency responsible for higher education must develop and maintain the Arkansas Higher Education Information System. The agency must give the Bureau of Legislative Research read-and-report-only access to the system's data warehouse of student academic data, financial aid data and related records. In giving that access, the agency must take reasonable precautions, including electronic blocking or redacting, to prevent disclosure of a student's personally identifiable information.

The exception is written consent of the student, or of the parent or guardian of a minor student, to the disclosure. The agency must also take those precautions to prevent disclosure of information that would cause it to lose funding under section 1232g of title 20 of the United States Code, as that section existed on . The agency must develop the method of redaction with the state's elementary and secondary education agency, based on that agency's standards.

Act 910 of 2019 restated the section, naming the Division of Higher Education as the agency and the Division of Elementary and Secondary Education as its partner on redaction. Act 1195 of 2011 added the subchapter and took effect on the date of the Governor's approval.

When LexLint raises it

When your app profile says your app serves colleges and universities.

Back to the example  ·  Lint your app

Page updated .