Law / United States / 
Oregon
Oregon student education records: record of requests and disclosures
In force.
A sensitive categories rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Governance
- Audit expectation
- none
What it requires
- Keep, with each student's education records and for as long as those records are maintained, a record of each request for access to and each disclosure of personally identifiable information from them, naming the parties who requested or received it, the date access was given and the legitimate interests they had (OAR 581-021-0400(1)).
- Where you disclose with the understanding that the receiving party may make further disclosures on your behalf, add to the record the names of the additional parties and the legitimate interests each has (OAR 581-021-0400(2)).
- Let the parent or eligible student, the school official responsible for the custody of the records and the parties authorized to audit your recordkeeping inspect the record for each student; you need not record requests from or disclosures to the parent or eligible student, a school official, a party with written consent or a party seeking directory information (OAR 581-021-0400(3) and (4)).
These lines are LexLint's reading of the law's text.
What record it asks for
Who may demand the log
Data subject, Auditor or notified body
What the log must hold
Actor identity, Event time, Access record
Logging duty
The rule requires a record of each request for access to and each disclosure of personally identifiable information from a student's education records.
- Kind
- Explicit
- As of
- Provision
- OAR 581-021-0400(1)
- Trigger
- personal_data_processing
What this law does
OAR 581-021-0400 requires an educational agency or institution to maintain a record of each request for access to and each disclosure of personally identifiable information from the education records of each student. The record must be kept with the student's education records for as long as those records are maintained.
For each request or disclosure the record must include the parties who requested or received the information, the date access was given and the legitimate interests the parties had in requesting or obtaining it. The parent or eligible student, the school official responsible for the custody of the records and the parties authorized in OAR 581-021-0340(1) and (3) for auditing the agency's recordkeeping procedures may inspect the record relating to each student.
The record is not required where the request was from or the disclosure was to the parent or eligible student, a school official under OAR 581-021-0340(1), a party with written consent or a party seeking directory information.
When LexLint raises it
When your app profile says your app serves K-12 schools.
Back to the example · Lint your app
Page updated .