SEARCH SITE

VIRGINIA LAW PORTAL

SEARCHABLE DATABASES

ACROSS SESSIONS

Developed and maintained by the Division of Legislative Automated Systems.

2016 SESSION

  • | print version

HB 519 School-affiliated entities; definition, providing protection for student personal information.

Introduced by: James M. LeMunyon | all patrons    ...    notes | add to my profiles | history

SUMMARY AS PASSED HOUSE:

School-affiliated entities; student personal information. Extends various protections for student information that is collected and maintained, used, or shared on certain websites, mobile applications, or online services used by school-affiliated entities. The bill defines "school-affiliated entity" as any private entity that provides support to a local school division or a public elementary or secondary school in the Commonwealth, including alumni associations, booster clubs, parent-teacher associations, parent-teacher-student associations, parent-teacher organizations, public education foundations, public education funds, and scholarship organizations.

SUMMARY AS INTRODUCED:

School-affiliated entities; student personal information. Requires each (i) private entity, such as an alumni association, booster club, parent-teacher association, parent-teacher-student association, parent-teacher organization, public education foundation, public education fund, or scholarship organization, that provides support to a local school division or a public elementary or secondary school in the Commonwealth and collects and maintains, uses, or shares student personal information, (ii) successor entity of such private entity, and (iii) third party with whom such private entity contracts to provide various protections for such information, including (a) providing clear and easy-to-understand information about the types of student personal information it collects and how it maintains, uses, or shares such student personal information; (b) maintaining a policy for the privacy of student personal information and providing prominent notice before making material changes to such policy; (c) maintaining a comprehensive information security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of student personal information and makes use of appropriate administrative, technological, and physical safeguards; (d) facilitating access to and correction of student personal information by each student whose student personal information it has collected, maintained, used, or shared, or by such student's parent, if the student is less than 18 years of age; and (e) collecting, maintaining, using, and sharing student personal information only with the consent of the student or, if the student is less than 18 years of age, his parent.