LexLint.ioBeta

Know the law your code answers to.

Law / United States / Idaho

SDATAA, notice of an unauthorized release of student data and the student data security plan

Idaho Code § 33-133(3)(b), (3)(d)

In force since .

A breach notification rule binding government bodies.

Obligation class
Breach notice, Security, Governance

What it requires

  • If you are the State Board of Education or the State Department of Education, notify the parent or student of an unauthorized release of student data that includes personally identifiable information, in a manner consistent with section 28-51-105 of the Idaho Code (Idaho Code 33-133(3)(b)).
  • If you are the State Board of Education, develop a detailed data security plan covering guidelines for authorizing and authenticating access to the student data system, administrative safeguards including data encryption and staff training, privacy compliance standards, privacy and security audits, breach planning, notification and procedures, and data retention and disposition policies (Idaho Code 33-133(3)(d)).

These lines are LexLint's reading of the law's text.

Who enforces it

Enforcement body

Idaho State Board of Education and State Department of Education, either of which may bring a civil enforcement action under section 33-133 of the Idaho Code.

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

In the case of an unauthorized release of student data that includes personally identifiable information, the State Board of Education or the State Department of Education must notify the parent or student in a manner consistent with section 28-51-105 of the Idaho Code.

The State Board of Education must develop a detailed data security plan that includes guidelines for authorizing and authenticating access to the student data system, administrative safeguards covering data encryption and staff training, privacy compliance standards, privacy and security audits, breach planning, notification and procedures, and data retention and disposition policies.

When LexLint raises it

When your app profile says your app serves schools or universities.

Back to the example  ·  Lint your app

Page updated .