Committee delays decision on requiring LEAs to keep student data in U.S.; staff to report back

The Licensure Committee debated and ultimately postponed action on R277‑487, the rule on public‑school data confidentiality and disclosure, after members raised questions about scope, contractor impacts and implementation.

Chair Carey proposed language directing USBE and LEAs to store student data within the United States and require a public disclosure when an LEA stores data outside the country. Carey said the intent was to ensure LEAs "know where their data is" and to increase parental visibility. Members and staff questioned whether the text should require LEAs to disclose only that they do not store data in the U.S. or to disclose why, since revealing contractual or cybersecurity constraints could pose risks. "If the LEAs keep data outside The United States, they should know it," Carey said, summarizing the transparency objective.

Staff and the director of privacy recommended a cautious approach and asked for time to examine contractor implications; they proposed a 90‑day staff review and a report with recommendations on how to approach contractors and artificial intelligence issues holistically. After debate, a substitute motion to bring the item back to the October committee meeting passed 3–2. The committee asked staff to include clearer explanatory language and to assess the impact on LEAs and vendors ahead of the next discussion.