New York Department of Education is proposing new rules that will:
- Parent’s Bill of Rights applicable to 3rd party vendors and setting standards on disclosing student data
- The National Institute for Standards and Technology Cybersecurity Framework (“NIST CSF”)
- Annual training for school district employees
- A Data Protection Officer in every school
- Notice of a school data breach must be given to the Department of Education within 10 days
- Civil Penalties that accrue per individual affected for 3rd party vendors.