Law / United States / 
Idaho
Student Data Accessibility, Transparency and Accountability Act (SDATAA)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
Commencement not set.
An enforcement supervision rule binding public and private bodies.
As of 2 September 2026.
What it requires
- Do not retain a K-12 student's biometric information, Social Security number, or affective-computing assessment data as part of the student's permanent educational record.
- Expect a violation of SDATAA to be actionable directly by an injured parent or student, not solely by a regulator, for a civil penalty of up to $50,000 per violation.
- If you are a school district or public charter school, adopt, implement, and post your student-data policy; failing to do so carries its own separate civil penalty.
- Unless prohibited by law or court order, give a parent or guardian copies of all of their child's educational records upon request, so long as the child has not yet turned eighteen.
If you get it wrong
Criminal exposureNo
Private right of actionYes
Penalty structure
A civil penalty not to exceed $50,000 per violation, payable to the state general fund, applies equally whether the enforcing action is a civil enforcement action initiated by the State Board of Education or the State Department of Education, or a court action initiated by an injured party. A separate civil penalty, also up to $50,000 and also paid to the general fund, applies to a district or public charter school that fails to adopt, implement, and post its student-data policy; that separate penalty is enforced solely by the State Board with Attorney General assistance, with no private right of action.
- Rule
- Per violation only
- As of
- 2 September 2026
- Currency
- USD
- Per violation unit
- Violation
- Per violation amount
- 50,000
Who enforces it
Enforcement body
Idaho State Board of Education and State Department of Education, either of which may bring a civil enforcement action; for the separate district or charter-school policy-adoption penalty, the State Board proceeds with the assistance of the Idaho Attorney General. An injured party may also bring a court action to enforce the same per-violation civil penalty, though the recovery is paid to the state's general fund rather than to the injured party.
What it reaches
Obligation class
Data subject rights, Breach notice, Consent, Retention, Transfer, Security, Governance
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
SDATAA binds the State Board of Education, school districts, public charter schools, and their private vendors on the collection, use, and disclosure of K-12 student data.
A student's permanent educational record may not include, among other exclusions, the student's biometric information, Social Security number, or data collected through statewide-assessment affective computing such as facial-expression, EEG, or eye-tracking analysis (with a carve-out for special needs and exceptional students).
Unlike Idaho's general breach and genetic-privacy statutes, SDATAA arms an injured party directly: a person found, in a court action initiated by an injured party or in a civil enforcement action by the State Board or the Department of Education, to have violated the Act is liable for a civil penalty of up to $50,000 per violation; a district or charter school that fails to adopt, implement, and post its student-data policy faces a separate $50,000 civil penalty enforced by the State Board with Attorney General assistance.
Unless otherwise prohibited by law or court order, a school district must provide a parent or guardian with copies of all of their child's educational records upon request, so long as the child has not yet turned eighteen.
When LexLint raises it
processes_biometrics
Read the law
official Idaho statute text, Idaho Code sec. 33-133, Idaho Legislature
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.