§ 300.623 Safeguards.

Plain English summary

This section requires participating agencies to protect the confidentiality of personally identifiable information across all stages from collection through destruction. Each agency must designate a responsible official, train all relevant personnel on applicable confidentiality policies, and publicly maintain a list of employees with access to such information.

Key requirements

• Each participating agency must protect the confidentiality of personally identifiable information at collection, storage, disclosure, and destruction stages.
• One official at each participating agency must assume responsibility for ensuring the confidentiality of any personally identifiable information.
• All persons collecting or using personally identifiable information must receive training or instruction regarding the State's policies and procedures under § 300.123 and 34 CFR part 99.
• Each participating agency must maintain, for public inspection, a current listing of the names and positions of those employees within the agency who may have access to personally identifiable information.

Affected parties

• participating agencies
• designated confidentiality officials
• agency employees collecting or using personally identifiable information
• general public
• students and families whose information is held

Official source

https://www.ecfr.gov/current/title-34/part-300/section-300.623