Law / United States / 
New Jersey
School district duties to secure student records and keep student information off the district website
Student records, N.J.A.C. 6A:32-7.1 and 6A:32-7.4
In force.
A sensitive categories rule binding public and private bodies.
- Obligation class
- Access restriction, Governance
What it requires
- If you are a school district, charter school, renaissance school project, approved private school for students with disabilities or private agency providing publicly funded educational services, have the chief school administrator or the administrator's designee take responsibility for the security of student records and devise procedures that limit access to authorized persons (N.J.A.C. 6A:32-7.4(a)).
- When you store student records electronically, administer proper security and backup procedures (N.J.A.C. 6A:32-7.4(b)(1)).
- Establish written policies and procedures for student records that assure their security, including the access and security of student records kept in an electronic system (N.J.A.C. 6A:32-7.1(g)(2) and (g)(9)).
- If you establish a website, do not disclose on it any personally identifiable information about a student (N.J.A.C. 6A:32-7.4(f)).
- Enumerate and describe in those written policies the student records you collect and maintain, and maintain the confidentiality of all student records containing a student's name, Social Security number, address and telephone number (N.J.A.C. 6A:32-7.1(g)(3) and (g)(10)).
These lines are LexLint's reading of the law's text.
What this law does
The student records subchapter applies to all district boards of education, charter schools, renaissance school projects, approved private schools for students with disabilities, and private agencies that provide educational services by means of public funds.
The chief school administrator, or the chief school administrator's designee, is responsible for the security of student records maintained in the school district and must devise procedures for assuring that access to student records is limited to authorized persons. When student records are stored electronically, proper security and backup procedures must be administered.
Each district board of education must establish written policies and procedures for student records that assure security of the student records. A district board of education that establishes a website may not disclose any personally identifiable information about a student. The written policies must enumerate and describe the student records the district board of education collects and maintains.
The written policies must also maintain the confidentiality of all student records containing the name, Social Security number, address and telephone number information.
When LexLint raises it
When your app profile says your app serves K-12 schools.
Back to the example · Lint your app
Page updated .