Law / United States / 
Florida
Florida School Safety Portal: data governance, role-based access and auditing for the integrated school safety data repository
In force since .
A sensitive categories rule binding government bodies.
- Obligation class
- Security, Access restriction
- Audit expectation
- continuous
- Who audits it
- Self
What it requires
- If you are the Office of Safe Schools in the Florida Department of Education, run the Florida School Safety Portal with data governance and security that ensures compliance with all applicable state and federal data privacy requirements through user authorization and role-based security, data anonymization and aggregation, and auditing capabilities (Fla. Stat. § 1001.212(6)).
- Allow access to data from a source agency only in accordance with the rules that agency adopts and, where applicable, the Federal Bureau of Investigation Criminal Justice Information Services security policy (Fla. Stat. § 1001.212(6)).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Data governance and security for the portal must ensure compliance with data privacy requirements through user authorization, role-based security and auditing capabilities, for as long as the portal runs. Auditing capabilities over who reaches the data presuppose a record of access. The text describes that record no further: it names no fields, no period for keeping it and no one entitled to see it.
- Kind
- Implicit
- As of
- Provision
- Fla. Stat. 1001.212(6)
- Trigger
- personal_data_processing
What this law does
The Office of Safe Schools in the Department of Education must coordinate with the Department of Law Enforcement to provide a unified search tool, the Florida School Safety Portal, drawing on social media Internet posts, the Department of Children and Families, the Department of Law Enforcement, the Department of Juvenile Justice, the FortifyFL suspicious activity reporting tool, school environmental safety incident reports and local law enforcement.
Data governance and security for the centralized integrated data repository must ensure compliance with all applicable state and federal data privacy requirements through user authorization and role-based security, data anonymization and aggregation and auditing capabilities. Data that is exempt or confidential and exempt from public records requirements keeps that status in the repository, and each source agency remains the sole custodian of its data for any public records request.
The department may allow access to data from the source agencies only in accordance with their rules and, where applicable, the Federal Bureau of Investigation Criminal Justice Information Services security policy. Chapter 2018-3, Laws of Florida, which created section 1001.212 with the data governance requirement, took effect on becoming law on .
When LexLint raises it
When your app profile says your app serves K-12 schools.
Back to the example · Lint your app
Page updated .