STUDENT ONLINE PROTECTION

Amends the Student Online Personal Protection Act. Provides that an operator shall not knowingly sell, rent, lease, or trade a student's information (rather than knowingly sell or rent a student's information). Regarding an operator's request to receive covered information from a school, a school district, or the State Board of Education, provides that the written agreement related thereto must require the operator to provide a parent with a means to view and to request edits to the covered information to be maintained by the operator. If a breach occurs and is attributed to the operator, provides that any investigation and remediation costs and expenses incurred by the school as a result of the breach shall be borne by the operator (rather than the costs and expenses shall be allocated between the operator and the school). Removes local school council members as individuals who are authorized to share, transfer, disclose, or provide access to a student's covered information without a written agreement. Requires the State Board of Education to develop and make available model student data privacy policies and procedures as soon as practical after July 1, 2021. Makes changes concerning parent and student rights. Effective immediately.