The Student Data Protection Act requires that each local education agency develop a data governance plan to help secure student level data. It also requires each LEA to designate a Data Manager and publicly post a Metadata Dictionary.
Utah FERPA: Except as provided in Subsection (7) Section, 53G-9-604, and Section 53G-9-702, policies adopted by a school district or charter school under Section 53E-9-202 shall include prohibitions on the administration to a student of any psychological or psychiatric examination, test, or treatment, or any survey, analysis, or evaluation without the prior written consent of the student's parent or legal guardian, in which the purpose or evident intended effect is to cause the student to reveal information, whether the information is personally identifiable or not, concerning the student's or any family member's:
a) political affiliations or, except as provided under Section 53G-10-202 or rules of the State Board of Education, political philosophies;
b) mental or psychological problems;
c) sexual behavior, orientation, or attitudes;
d) illegal, anti-social, self-incriminating, or demeaning behavior;
e) critical appraisals of individuals with whom the student or family member has close family relationships;
f) religious affiliations or beliefs;
g) legally recognized privileged and analogous relationships, such as those with lawyers, medical personnel, or ministers; and
e) income, except as required by law.
(LEA) Local Education Agency: A commonly used acronym for a school district or charter school
(PII) Personally Identifiable Information : Includes information that can be used to distinguish or trace an individual's identity either directly or indirectly through linkages with other information