The New York State Education Law governs the unauthorized release of personally identifiable information.
The New York Board of Regents adopted Part 121 of the Regulations of the Commissioner of Education on January 13, 2020. These rules will implement Education Law Section 2-d and provide guidance to educational agencies and their third-party contractors on ways to strengthen data privacy and security to protect student data and annual professional performance review data. The regulation went through multiple sets of revisions and three rounds of public comments and will go into effect January 29, 2020. It will apply to both charter and traditional public schools.
An overview of Education Law 2-d may be found at:
New York State Education Law Section 2-d Inventory of Data Elements
The New York State Education Law Section 2-d Inventory of Data Elements can be found at https://www.p12.nysed.gov/irs/sirs/home.html