{"id":1139,"date":"2019-02-06T21:47:00","date_gmt":"2019-02-06T21:47:00","guid":{"rendered":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2019\/02\/06\/regulatory-trend-state-agency-data-security-requirements-for-student-data-civil-liability-education-vendors\/"},"modified":"2019-02-06T21:47:00","modified_gmt":"2019-02-06T21:47:00","slug":"regulatory-trend-state-agency-data-security-requirements-for-student-data-civil-liability-education-vendors","status":"publish","type":"post","link":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/regulatory-trend-state-agency-data-security-requirements-for-student-data-civil-liability-education-vendors\/","title":{"rendered":"Regulatory TREND. State Agency Data Security Requirements for Student DATA. Civil Liability Education Vendors."},"content":{"rendered":"<p>New York Department of Education is<a href=\"http:\/\/www.nysed.gov\/common\/nysed\/files\/programs\/student-data-privacy\/proposed-part-121-for-pii.pdf\"> proposing new rules\u00a0<\/a>\u00a0that will:<\/p>\n<ul>\n<li><strong>Parent\u2019s Bill of Rights\u00a0<\/strong>applicable to 3rd party vendors and setting standards on disclosing student data<\/li>\n<li>The\u00a0<a href=\"https:\/\/www.nist.gov\/cyberframework\" style=\"border:none;color:rgb(240,122,34);text-decoration:none;font-family:Merriweather, serif;font-size:13px;text-align:justify;\" target=\"_blank\" rel=\"noreferrer noopener\">National Institute for Standards and Technology Cybersecurity Framework<\/a>\u00a0(\u201cNIST CSF\u201d)<\/li>\n<li>Annual training for school district employees<\/li>\n<li>A Data Protection Officer in every school<\/li>\n<li>Notice of a school data breach must be given to the Department of Education within 10 days<\/li>\n<li>Civil Penalties that accrue per individual affected for 3rd party vendors.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.natlawreview.com\/article\/nys-education-department-proposes-to-significantly-strengthen-data-security-and\">National Law Review |\u00a0NYS Education Department Proposes to Significantly Strengthen Data Security and Privacy Protocol<\/a>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>New York Department of Education is<a href=\"http:\/\/www.nysed.gov\/common\/nysed\/files\/programs\/student-data-privacy\/proposed-part-121-for-pii.pdf\"> proposing new rules\u00a0<\/a>\u00a0that will:<\/p>\n<ul>\n<li><strong>Parent\u2019s Bill of Rights\u00a0<\/strong>applicable to 3rd party vendors and setting standards on disclosing student data<\/li>\n<li>The\u00a0<a href=\"https:\/\/www.nist.gov\/cyberframework\" style=\"border:none;color:rgb(240,122,34);text-decoration:none;font-family:Merriweather, serif;font-size:13px;text-align:justify;\" target=\"_blank\" rel=\"noreferrer noopener\">National Institute for Standards and Technology Cybersecurity Framework<\/a>\u00a0(\u201cNIST CSF\u201d)<\/li>\n<li>Annual training for school district employees<\/li>\n<li>A Data Protection Officer in every school<\/li>\n<li>Notice of a school data breach must be given to the Department of Education within 10 days<\/li>\n<li>Civil Penalties that accrue per individual affected\u2026<\/li>\n<\/ul>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,42,32,3,28,11],"tags":[],"class_list":["post-1139","post","type-post","status-publish","format-standard","hentry","category-2017-legislative-issue","category-2019-legislative-issue","category-education-data","category-legislative-trend","category-regulatory-trend","category-student-data-privacy","entry"],"_links":{"self":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/1139","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/comments?post=1139"}],"version-history":[{"count":0,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/1139\/revisions"}],"wp:attachment":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/media?parent=1139"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/categories?post=1139"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/tags?post=1139"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}