Law / United States / 
Kansas
Student Data Privacy Act, biometric data collection consent
In force since .
A sensitive categories rule binding government bodies.
- Audit expectation
- none
What it requires
- Obtain the written consent of an adult student, or the parent or legal guardian of a minor student, before a Kansas school district collects the student's biometric data, including a fingerprint, retina or iris pattern, voiceprint, DNA sequence, facial characteristic, or handwriting sample.
- Obtain that same written consent before using a device or mechanism to assess a Kansas student's physiological or emotional state.
These lines are LexLint's reading of the law's text. Also read by: Office of the Kansas Attorney General (guidance, recorded ).
In the frameworks
- NIST Privacy Framework
- CT.PO-P1Policies, processes, and procedures for authorizing data processing (e.g., organizational decisions, individual consent), revoking authorizations, and maintaining authorizations are established and in place.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Settledness
- As of
- Guidance link
- https://www.ag.ks.gov/file-a-complaint/student-data-privacy
- Guidance body
- Office of the Kansas Attorney General
- Open questions
- Does 'physiological or emotional state' in K.S.A. 72-6315 reach a device that assesses a student's psychological state, which is how the Attorney General's page describes the prohibition?
What it makes you log
Logging duty
A school district may collect a student's biometric data, or use a device to assess a student's physiological or emotional state, only if the student (if an adult) or the parent or legal guardian (if a minor) consents in writing. The consent in writing is a condition of collection; the section does not say the district must keep, record or produce the consent, and it names no audit or access to a record. The section states no territorial clause; the reach to a Kansas school district sits in the definition of school district in K.S.A. 72-6313(f), which this row does not cite.
- Kind
- None
- As of
What this law does
No school district may collect biometric data from a student, or use a device or mechanism to assess a student's physiological or emotional state, without the written consent of an adult student or the parent or legal guardian of a minor student, K.S.A. 72-6315.
When LexLint raises it
When your app profile says your app processes biometric data or processes personal data.
Back to the example · Lint your app
Page updated .