Law / United States / 
New Jersey
Statewide Longitudinal Data System for Education and Workforce Development: NIST standards, secure environment with aggregate-only release, and privacy standards
Statewide Longitudinal Data System, N.J.S.A. 18A:4-2.1 (P.L.2025, c.388, section 1)
In force since .
A sensitive categories rule binding government bodies.
- Obligation class
- Security, Governance
What it requires
- If you are the Statewide Longitudinal Data System Governing Body, or an entity it engages to maintain the system, have the system meet the standards of the National Institute of Standards and Technology and maintain certification or accreditation from it, as applicable (N.J.S.A. 18A:4-2.1(b)(2)).
- Follow rigorous data security guidelines for the system and release only aggregate-level data from its secure environment (N.J.S.A. 18A:4-2.1(b)(2)).
- Define and maintain standards for the privacy, confidentiality and security of the data in the system (N.J.S.A. 18A:4-2.1(a)(3)(c)).
- If you are a participating agency (the Department of Education, the Office of the Secretary of Higher Education, the Higher Education Student Assistance Authority or the Department of Labor and Workforce Development), provide the data the system needs, in accordance with all State and federal laws governing the protection, retention and sharing of the data (N.J.S.A. 18A:4-2.1(b)(3) and (b)(5)).
These lines are LexLint's reading of the law's text.
What this law does
The Statewide Longitudinal Data System Governing Body consists of one representative from each of the Department of Education, the Office of the Secretary of Higher Education, the Higher Education Student Assistance Authority and the Department of Labor and Workforce Development. The governing body must establish and maintain a Statewide Longitudinal Data System for Education and Workforce Development, or may enter into an agreement with a separate entity to do so.
The system must meet the standards of the National Institute of Standards and Technology and maintain certification or accreditation, as applicable, from it. The system must follow rigorous data security guidelines and may release only aggregate-level data from the secure environment. The governing body must operate with the objective of defining and maintaining standards for privacy, confidentiality and security of data.
Each participating agency in the governing body must provide the data necessary to carry out the act. Data provided to the system must be provided in accordance with all State and federal laws governing the protection, retention and sharing of the data. The act took effect immediately and was approved on .
When LexLint raises it
When your app profile says your app serves schools or universities.
Back to the example · Lint your app
Page updated .