Student Privacy Protection Act

[AI summary unavailable — showing source text] Student Privacy Protection Act Amends the Family Educational Rights and Privacy Act of 1974 (FERPA) to require educational agencies or institutions and state educational authorities to establish: (1) information security practices to protect students' education records and personally identifiable information, and (2) breach notification policies to notify parents of breaches or security violations. Expands the definition of "education records" to include student records that are: (1) maintained electronically or digitally; (2) accessible or collected by service providers, contractors, or other parties; or (3) created by or for a state educational authority, without regard to whether the student attends a school under the jurisdiction of such state educational authority. Allows educational agencies or institutions to disclose education records without parental consent to education service providers, contractors, or other parties to whom institutional services have been outsourced, provided that the party agrees to secure information from unauthorized access and be subject to penalties for violations. Permits disclosure of education records without parental consent to autho…