HB564 Alabama 2015 Session

Summary

Primary Sponsor

Arnold MooneyRepresentative

Republican

Session

Regular Session 2015

Title

Student data, collection and maintenance of certain student data provided for, sharing prohibition

Summary

HB564 would sharply limit student data collection and sharing in Alabama public schools to protect privacy and civil liberties, with strong family rights and penalties for violations.

What This Bill Does

HB564 limits local data collection to a defined list and restricts state agencies from compiling or sharing student data beyond clearly academic purposes. It requires written parental consent for any data not on the allowed list and allows only aggregate data to be transmitted to the state, with personally identifiable information destroyed. It bans collecting or using psychological data, predictive modeling, and most surveys on sensitive topics, and imposes data-security requirements for contractors, including encryption and annual audits. It gives parents and eligible students access to records, the right to correct or remove data, and creates civil penalties and a private action for violations.

Who It Affects

• Students in Alabama public schools and their parents/guardians would gain stronger privacy protections and rights to access and correct their records.
• Public schools, school districts, the Alabama Department of Education, and contractors or cloud service providers would need to limit data collection, secure and audit data, disclose information transparently, and face penalties for violations.

Key Provisions

• Data collection limits: Local collection is restricted to a defined set of data (e.g., basic demographics, academic records, enrollment, attendance, limited health and discipline data); collecting data not on this list requires parental consent.
• Parental consent for non-listed data: Unless required by federal statute, written informed consent is needed before collecting any data not listed as allowed.
• Aggregate data to state; destroy PII: Only aggregate data may be transmitted to the state, and personally identifiable information in the state system must be destroyed after it is no longer needed.
• Transparency: Agencies must publicly disclose the existence and purpose of education records and notify parents annually; provide details about data categories and disclosures.
• No psychological or predictive data: Psychological data, noncognitive data, predictive modeling, and related surveys are prohibited from state assessments and most school surveys.
• Access and correction rights: Parents and eligible students can access records, request corrections or removals, and obtain copies at no charge.
• Security, outsourcing, and breach response: Contractors must meet safeguards, use encryption, conduct annual security audits, and promptly report breaches; the state can require remedies and bear costs of breaches.
• Commercial use prohibition: Personally identifiable data cannot be sold or used for marketing; cloud providers cannot use data for secondary commercial purposes and must store data in the United States.
• Enforcement: Civil penalties apply for violations, with a private right of action for individuals; the Attorney General and district attorneys enforce compliance.

AI-generated summary using openai/gpt-5-nano on Feb 24, 2026. May contain errors — refer to the official bill text for accuracy.

Subjects

Education