86R11230 CAE-D By: VanDeaver H.B. No. 2691 A BILL TO BE ENTITLED AN ACT relating to restricting the use of personally identifiable student information by an operator of a website, online service, online application, or mobile application used for a school purpose. BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: SECTION 1. Section 32.155, Education Code, is amended to read as follows: Sec. 32.155. PROTECTION OF COVERED INFORMATION. (a) An operator must implement and maintain reasonable security procedures and practices designed to protect any covered information from unauthorized access, deletion, use, modification, or disclosure. (b) The agency and any operator that possesses any covered information must use the unique identifier system established by the Texas Student Data System (TSDS) or a successor data management system maintained by the agency for any account creation, data upload, data transmission, analysis, or reporting to mask all personally identifiable student information. Any operator conducting business with the agency or a school district, open-enrollment charter school, regional education service center, or other local education agency shall adhere to a state required student data sharing agreement that includes an established data masking standard for all operators as prescribed by the agency. SECTION 2. This Act takes effect September 1, 2019.