Gov. J.B. Pritzker signed legislation that amends the old Illinois Student Online Personal Protection Act and gives parents more control.
Under the new law:
- Parents will be informed about what’s being collected, who has that data, who has access to it and what it’s being used for.
- Parents must be told if there’s a data breach within 30 days if the school suffered the breach and within 60 days if a third party is responsible for the data leak.
- Districts are no longer going to be allowed to share data unless there’s a written agreement with who they’re sharing it with.
- Districts are also going to have to put out an inventory of what data elements they’re collecting on students and make that public.