Law / United States /
Northern Mariana Islands
Public School System Technology Use Regulation: cybersecurity policies for sensitive data and audits of data access
In force.
A sensitive categories rule binding government bodies.
- Obligation class
- Disclosure, Governance, Security
What it requires
- If you are the Public School System, adopt cybersecurity policies that ensure the protection of sensitive data, maintain the integrity of your systems and safeguard against cyber threats (Technology Use Regulation, proposed regulation (5)).
- Have the Data Governance Committee representative keep data governance aligned with privacy standards, train staff on data security and regularly audit access to data (Technology Use Regulation, responsibilities).
- Publish the technology use regulations on your website, distribute them by email to everyone with a System email account, and collect through an electronic form each recipient's acknowledgment of the regulations and consent to abide by them (Technology Use Regulation, proposed regulation (8)).
These lines are LexLint's reading of the law's text.
What this law does
The Technology Use Regulation of the State Board of Education was adopted as proposed and published, and it replaces in their entirety the Public School System's student internet usage rules at NMIAC section 60-20-540 and its two internet usage rules for personnel.
The System, through the Commissioner of Education and with a Technology Oversight Committee, drafts, adopts and publishes the policies for the appropriate use of technology, and those policies bind the System, its staff and its students. The System must adopt cybersecurity policies to ensure the protection of sensitive data, maintain the integrity of its systems and safeguard against cyber threats.
A Data Governance Committee representative ensures that data governance aligns with privacy standards, trains staff on data security and regularly audits data access to maintain compliance with regulations. The regulations must be published on the System's website and distributed by email to everyone with a System email account, and each recipient must formally acknowledge through an electronic form their understanding of the regulations and their consent to abide by them.
When LexLint raises it
When your app profile says your app serves K-12 schools.
Back to the example · Lint your app
Page updated .