2016 Colorado Revised Statutes
Title 22 - Education
General and Administrative
Article 16 - Student Data Transparency and Security
§ 22-16-111. Use of data - exceptions - application of article

(1) Notwithstanding any provision of this article to the contrary, this article does not prohibit the use of student personally identifiable information to:

(a) Use adaptive learning or design personalized or customized education;

(b) Maintain, develop, support, improve, or diagnose a school service contract provider's website, online service, online application, or mobile application;

(c) Provide recommendations for school, educational, or employment purposes within a school service, so long as the response is not determined in whole or in part by payment or other consideration from a third party;

(d) Respond to a student's request for information or for feedback so long as the information or response is not determined in whole or in part by payment or other consideration from a third party;

(e) Identify for the student, only with the written consent of the student or the student's parent, institutions of higher education or scholarship providers that are seeking students who meet specific criteria, regardless of whether the identified institutions of higher education or scholarship providers provide consideration to the school service contract provider;

(f) In accordance with the terms of a contract between the school service contract provider and a public education entity, produce and distribute, free or for consideration, student class photos and yearbooks only to the public education entity, students, parents, or individuals authorized by parents; or

(g) Provide for the student, only with the express written consent of the student or the student's parent given in response to clear and conspicuous notice, access to employment opportunities, educational scholarships or financial aid, or postsecondary education opportunities, regardless of whether the school service contract provider receives consideration from one or more third parties in exchange for the student personally identifiable information. This exception applies only to school service contract providers that provide nationally recognized assessments that postsecondary institutions of higher education use in making admissions decisions.

(2) This article does not:

(a) Impose a duty on a provider of an interactive computer service, as defined in 47 U.S.C. sec. 230, to review or enforce compliance with this article by school service contract providers or school service on-demand providers;

(b) Impede the ability of a student to download, export, or otherwise save or maintain his or her own student personally identifiable information or documents;

(c) Limit internet service providers from providing internet connectivity to public schools or to students and their families;

(d) Prohibit a school service contract provider from marketing educational products directly to parents so long as the marketing does not result from the use of student personally identifiable information obtained by the school service contract provider as a result of providing its website, online service, online application, or mobile application; or

(e) Impose a duty on a provider of an electronic store, gateway, marketplace, or other means of purchasing or downloading software or applications to review or enforce compliance with this article on that software or those applications.

(3) The requirements specified in sections 22-16-108 to 22-16-110 apply to school service contract providers that enter into or renew contracts with public education entities on or after the effective date of this article.