Law / United States / 
Oregon
Oregon standardized student data method and standards for student education records
In force since .
A sensitive categories rule binding public and private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Governance, Security
- Audit expectation
- none
What it requires
- Department of Education: develop and implement a standardized method to be used by school districts, education service districts and the department to electronically create, collect, use, maintain, disclose, transfer and access student data from multiple platforms (ORS 326.561(1)).
- Department of Education: build the method so that it allows the collection of at least the student data types ORS 326.561(3) lists, among them student education records and student medical alerts and other health data necessary for state reporting (ORS 326.561(3)).
- Department of Education: ensure during the transition to the method that the integrity and security of student data is maintained (section 2(4)(a), chapter 567, Oregon Laws 2025).
- State Board of Education: adopt by rule standards for the creation, collection, use, maintenance, disclosure, transfer and access of student education records held by a school district or another public or private educational entity that provides educational services to students in any grade from kindergarten through grade 12 (ORS 326.565(1)).
- School districts: make the student education records rules the Board adopts available to the public schools in the district and to the public (ORS 326.565(3)).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
The statutes direct the Department of Education to build a standardized student data method, direct the State Board of Education to adopt student education records standards and direct school districts to publish those rules. They name no log, no record the district keeps, no audit and no reader of a record. The transition duty to keep student data secure is a control on the data and not a record duty.
- Kind
- None
- As of
What this law does
ORS 326.561 directs the Department of Education to develop and implement a standardized method to be used by school districts, education service districts and the department to electronically create, collect, use, maintain, disclose, transfer and access student data from multiple platforms.
The method must allow for the collection of at least the types of student data that ORS 326.561(3) lists, including student education records and student medical alerts and other health data necessary for state reporting. During the transition to the method, the Department must ensure that the integrity and security of student data is maintained. The technical advisory committee must analyze and make recommendations regarding cybersecurity issues that may affect student data.
The State Board of Education must adopt by rule standards for the creation, collection, use, maintenance, disclosure, transfer and access of student education records held by a school district or another public or private educational entity that provides educational services to students in any grade from kindergarten through grade 12. School districts must make the rules the Board adopts available to the public schools in the district and to the public. House Bill 2508 (chapter 567, Oregon Laws 2025) took effect on its passage, .
When LexLint raises it
When your app profile says your app serves K-12 schools.
Back to the example · Lint your app
Page updated .