Law / United States / Connecticut

Boards of education: notice to students and parents of a student data breach a contractor reports

Conn. Gen. Stat. § 10-234dd(a)(3)

In force since .

A breach notification rule binding government bodies.

Obligation class
Breach notice
Audit expectation
none

What it requires

  • If you are a local or regional board of education, electronically notify the student and the student's parents or guardians not later than two business days after you receive a contractor's notice of a breach of security involving their student information, student records or student-generated content (section 10-234dd(a)(3)).
  • Post that notice on the board's Internet web site (section 10-234dd(a)(3)).

These lines are LexLint's reading of the law's text.

Who enforces it

Settledness

As of

What record it asks for

Logging duty

Section 10-234dd(a)(3) requires a board of education to notify the affected student and parents electronically within two business days of a contractor's breach notice and to post the notice on its web site. A notice is not a record of processing, access or decisions, and no clause tells a board to keep a log. The section states no territorial clause, so the hook is left empty.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Not later than two business days after a local or regional board of education receives a contractor's notice of a breach of security under section 10-234dd(a)(1) or (2), the board must electronically notify the student and the parents or guardians of the student whose student information, student records or student-generated content is involved. The board must also post the notice on its Internet web site.

A contractor must give the board that notice without unreasonable delay and within thirty days after discovering a breach of student information other than directory information, and within sixty days for directory information, student records or student-generated content. Public Act 17-200 replaced forty-eight hours with two business days in section 10-234dd(a)(3), effective .

When LexLint raises it

When your app profile says your app serves K-12 schools.

Back to the example  ·  Lint your app

Page updated .