{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2026\/code-json\/22.1-20.2.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2026\/code-text\/22.1-20.2.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2026\/code-xml\/22.1-20.2.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2026\/code-html\/22.1-20.2.html"}],"law_id":354363,"edition_id":2,"section_id":354363,"structure_id":50684,"section_number":"22.1-20.2","catch_line":"Student data security","history":"2015, c. 561.","full_text":"A\n\nThe Department of Education shall develop, in collaboration with the Virginia Information Technologies Agency, and update regularly but in no case less than annually, a model data security plan for the protection of student data held by school divisions. Such model plan shall include (i) guidelines for access to student data and student data systems, including guidelines for authentication of authorized access; (ii) privacy compliance standards; (iii) privacy and security audits; (iv) procedures to follow in the event of a breach of student data; and (v) data retention and disposition policies. The model plan and any updates shall be made available to every school division.\n\nB\n\nThe Department of Education shall designate a chief data security officer, with such state funds as made available, to assist school divisions, upon request, with the development and implementation of their own data security plans and to develop best practice recommendations regarding the use, retention, and protection of student data.\n\n","order_by":null,"text":{"0":{"id":1319123,"text":"The Department of Education shall develop, in collaboration with the Virginia Information Technologies Agency, and update regularly but in no case less than annually, a model data security plan for the protection of student data held by school divisions. Such model plan shall include (i) guidelines for access to student data and student data systems, including guidelines for authentication of authorized access; (ii) privacy compliance standards; (iii) privacy and security audits; (iv) procedures to follow in the event of a breach of student data; and (v) data retention and disposition policies. The model plan and any updates shall be made available to every school division.","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"B"},"1":{"id":1319124,"text":"The Department of Education shall designate a chief data security officer, with such state funds as made available, to assist school divisions, upon request, with the development and implementation of their own data security plans and to develop best practice recommendations regarding the use, retention, and protection of student data.","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A"}},"ancestry":[{"id":50684,"edition_id":2,"name":"Board of Education","identifier":"2","label":"chapter","depth":2,"order_by":2,"parent_id":50682,"metadata":{"child_laws":38,"child_structures":0},"date_created":"2026-08-02 02:31:28","date_modified":"2026-08-02 12:30:58","permalink":{"id":1410359,"object_type":"structure","relational_id":50684,"identifier":"2","token":"22.1\/2","url":"\/22.1\/2\/","edition_id":2,"permalink":0,"preferred":1}},{"id":50682,"edition_id":2,"name":"Education","identifier":"22.1","label":"title","depth":1,"order_by":60,"parent_id":null,"metadata":{"child_laws":858,"child_structures":99},"date_created":"2026-08-02 02:31:28","date_modified":"2026-08-02 12:30:57","permalink":{"id":1407951,"object_type":"structure","relational_id":50682,"identifier":"22.1","token":"22.1","url":"\/22.1\/","edition_id":2,"permalink":0,"preferred":1}}],"structure_contents":[{"id":354175,"structure_id":50684,"section_number":"22.1-10","catch_line":"President","url":"\/22.1-10\/","token":"22.1\/2\/22.1-10","metadata":false},{"id":354188,"structure_id":50684,"section_number":"22.1-11","catch_line":"Quorum","url":"\/22.1-11\/","token":"22.1\/2\/22.1-11","metadata":false},{"id":354200,"structure_id":50684,"section_number":"22.1-12","catch_line":"Oath of office","url":"\/22.1-12\/","token":"22.1\/2\/22.1-12","metadata":false},{"id":354214,"structure_id":50684,"section_number":"22.1-13","catch_line":"Meetings","url":"\/22.1-13\/","token":"22.1\/2\/22.1-13","metadata":false},{"id":354238,"structure_id":50684,"section_number":"22.1-14","catch_line":"Minutes","url":"\/22.1-14\/","token":"22.1\/2\/22.1-14","metadata":false},{"id":354256,"structure_id":50684,"section_number":"22.1-15","catch_line":"Repealed","url":"\/22.1-15\/","token":"22.1\/2\/22.1-15","metadata":false},{"id":354272,"structure_id":50684,"section_number":"22.1-16","catch_line":"Bylaws and regulations generally","url":"\/22.1-16\/","token":"22.1\/2\/22.1-16","metadata":false},{"id":354264,"structure_id":50684,"section_number":"22.1-16.1","catch_line":"Board to establish regulations regarding human research","url":"\/22.1-16.1\/","token":"22.1\/2\/22.1-16.1","metadata":false},{"id":354265,"structure_id":50684,"section_number":"22.1-16.2","catch_line":"Repealed","url":"\/22.1-16.2\/","token":"22.1\/2\/22.1-16.2","metadata":false},{"id":354266,"structure_id":50684,"section_number":"22.1-16.3","catch_line":"Cooperation with other state agencies regarding students placed in group homes or residential facilities having educational programs","url":"\/22.1-16.3\/","token":"22.1\/2\/22.1-16.3","metadata":false},{"id":354267,"structure_id":50684,"section_number":"22.1-16.4","catch_line":"Nutrition and physical activity best practices database","url":"\/22.1-16.4\/","token":"22.1\/2\/22.1-16.4","metadata":false},{"id":354268,"structure_id":50684,"section_number":"22.1-16.5","catch_line":"Training materials on human trafficking","url":"\/22.1-16.5\/","token":"22.1\/2\/22.1-16.5","metadata":false},{"id":354269,"structure_id":50684,"section_number":"22.1-16.6","catch_line":"Guidelines for alternatives to suspension","url":"\/22.1-16.6\/","token":"22.1\/2\/22.1-16.6","metadata":false},{"id":354270,"structure_id":50684,"section_number":"22.1-16.7","catch_line":"Regulations regarding endorsement to teach military science","url":"\/22.1-16.7\/","token":"22.1\/2\/22.1-16.7","metadata":false},{"id":354271,"structure_id":50684,"section_number":"22.1-16.8","catch_line":"Instructional material; sexually explicit content; parental notification","url":"\/22.1-16.8\/","token":"22.1\/2\/22.1-16.8","metadata":false},{"id":354306,"structure_id":50684,"section_number":"22.1-17","catch_line":"Statements concerning regulations","url":"\/22.1-17\/","token":"22.1\/2\/22.1-17","metadata":false},{"id":354297,"structure_id":50684,"section_number":"22.1-17.01","catch_line":"Definition of \"intervener.\"","url":"\/22.1-17.01\/","token":"22.1\/2\/22.1-17.01","metadata":false},{"id":354298,"structure_id":50684,"section_number":"22.1-17.02","catch_line":"Definition of \"student with limited or interrupted formal education\"","url":"\/22.1-17.02\/","token":"22.1\/2\/22.1-17.02","metadata":false},{"id":354299,"structure_id":50684,"section_number":"22.1-17.1","catch_line":"Regulations for reenrollment","url":"\/22.1-17.1\/","token":"22.1\/2\/22.1-17.1","metadata":false},{"id":354300,"structure_id":50684,"section_number":"22.1-17.2","catch_line":"Nursing education programs","url":"\/22.1-17.2\/","token":"22.1\/2\/22.1-17.2","metadata":false},{"id":354301,"structure_id":50684,"section_number":"22.1-17.3","catch_line":"Identification of student internship programs","url":"\/22.1-17.3\/","token":"22.1\/2\/22.1-17.3","metadata":false},{"id":354302,"structure_id":50684,"section_number":"22.1-17.4","catch_line":"Certain honorary diplomas to be issued under specific circumstances","url":"\/22.1-17.4\/","token":"22.1\/2\/22.1-17.4","metadata":false},{"id":354303,"structure_id":50684,"section_number":"22.1-17.5","catch_line":"Public notice and comment regarding certain resource guides","url":"\/22.1-17.5\/","token":"22.1\/2\/22.1-17.5","metadata":false},{"id":354304,"structure_id":50684,"section_number":"22.1-17.6","catch_line":"Public elementary and secondary schools and local school divisions; information and forms","url":"\/22.1-17.6\/","token":"22.1\/2\/22.1-17.6","metadata":false},{"id":354305,"structure_id":50684,"section_number":"22.1-17.7","catch_line":"Social-emotional learning guidance standards","url":"\/22.1-17.7\/","token":"22.1\/2\/22.1-17.7","metadata":false},{"id":354330,"structure_id":50684,"section_number":"22.1-18","catch_line":"Report on education and standards of quality for school divisions; when submitted and effective","url":"\/22.1-18\/","token":"22.1\/2\/22.1-18","metadata":false},{"id":354328,"structure_id":50684,"section_number":"22.1-18.01","catch_line":"Biennial review of the standards of quality required; budget estimates","url":"\/22.1-18.01\/","token":"22.1\/2\/22.1-18.01","metadata":false},{"id":354329,"structure_id":50684,"section_number":"22.1-18.1","catch_line":"Annual report on gifted education required; local advisory committee on gifted education","url":"\/22.1-18.1\/","token":"22.1\/2\/22.1-18.1","metadata":false},{"id":354342,"structure_id":50684,"section_number":"22.1-19","catch_line":"Accreditation of elementary, middle, and high schools; nursery schools; recognition of certain organizations; child day center regulation","url":"\/22.1-19\/","token":"22.1\/2\/22.1-19","metadata":false},{"id":354341,"structure_id":50684,"section_number":"22.1-19.1","catch_line":"Action for violations related to secure mandatory tests","url":"\/22.1-19.1\/","token":"22.1\/2\/22.1-19.1","metadata":false},{"id":354366,"structure_id":50684,"section_number":"22.1-20","catch_line":"Retention of pupil personnel records","url":"\/22.1-20\/","token":"22.1\/2\/22.1-20","metadata":false},{"id":354362,"structure_id":50684,"section_number":"22.1-20.1","catch_line":"Powers and duties of the Board related to public broadcasting stations; disbursement of funds","url":"\/22.1-20.1\/","token":"22.1\/2\/22.1-20.1","metadata":false},{"id":354363,"structure_id":50684,"section_number":"22.1-20.2","catch_line":"Student data security","url":"\/22.1-20.2\/","token":"22.1\/2\/22.1-20.2","metadata":false},{"id":354364,"structure_id":50684,"section_number":"22.1-20.3","catch_line":"Granting easements across lands of certain schools and institutions","url":"\/22.1-20.3\/","token":"22.1\/2\/22.1-20.3","metadata":false},{"id":354365,"structure_id":50684,"section_number":"22.1-20.4","catch_line":"Alternative assessments for students who are English language learners","url":"\/22.1-20.4\/","token":"22.1\/2\/22.1-20.4","metadata":false},{"id":355001,"structure_id":50684,"section_number":"22.1-8","catch_line":"General supervision vested in Board","url":"\/22.1-8\/","token":"22.1\/2\/22.1-8","metadata":false},{"id":355018,"structure_id":50684,"section_number":"22.1-9","catch_line":"Appointment, terms, and vacancies","url":"\/22.1-9\/","token":"22.1\/2\/22.1-9","metadata":false},{"id":355017,"structure_id":50684,"section_number":"22.1-9.1","catch_line":"Student Advisory Board established","url":"\/22.1-9.1\/","token":"22.1\/2\/22.1-9.1","metadata":false}],"previous_section":{"id":354362,"structure_id":50684,"section_number":"22.1-20.1","catch_line":"Powers and duties of the Board related to public broadcasting stations; disbursement of funds","url":"\/22.1-20.1\/","token":"22.1\/2\/22.1-20.1","metadata":false},"next_section":{"id":354364,"structure_id":50684,"section_number":"22.1-20.3","catch_line":"Granting easements across lands of certain schools and institutions","url":"\/22.1-20.3\/","token":"22.1\/2\/22.1-20.3","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/22.1-20.2\/","history_text":"<p>This law was first created in 2015. The record of its establishment is cataloged in chapter <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?151+ful+CHAP0561\">561<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year.<\/p>","references":false,"refers_to":false,"permalink":{"id":1410489,"object_type":"law","relational_id":354363,"identifier":"22.1-20.2","token":"22.1\/2\/22.1-20.2","url":"\/22.1-20.2\/","edition_id":2,"permalink":0,"preferred":1},"url":"\/22.1-20.2\/","token":"22.1\/2\/22.1-20.2","dublin_core":{"Title":"Student data security","Type":"Text","Format":"text\/html","Identifier":"\u00a7 22.1-20.2","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t<section id=\"A\"><p><span class=\"prefix-number\">A.<\/span> The <span class=\"dictionary\">Department<\/span> of Education shall develop, in collaboration with the Virginia Information Technologies Agency, and update regularly but in no case less than annually, a model data security plan for the protection of student data held by school divisions. Such model plan shall include (i) guidelines for access to student data and student data systems, including guidelines for authentication of authorized access; (ii) privacy compliance standards; (iii) privacy and security audits; (iv) procedures to follow in the event of a breach of student data; and (v) data retention and <span class=\"dictionary\">disposition<\/span> policies. The model plan and any updates shall be made available to every school division. <a id=\"paragraph-1319123\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/22.1-20.2\/#A\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B\"><p><span class=\"prefix-number\">B.<\/span> The <span class=\"dictionary\">Department<\/span> of Education shall designate a chief data security officer, with such state funds as made available, to assist school divisions, upon request, with the development and implementation of their own data security plans and to develop best practice recommendations regarding the use, retention, and protection of student data. <a id=\"paragraph-1319124\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/22.1-20.2\/#B\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>","plain_text":"                                 CODE OF VIRGINIA\n\nSTUDENT DATA SECURITY (\u00a7 22.1-20.2)\n\nA. The Department of Education shall develop, in collaboration with the Virginia\nInformation Technologies Agency, and update regularly but in no case less than\nannually, a model data security plan for the protection of student data held by\nschool divisions. Such model plan shall include (i) guidelines for access to\nstudent data and student data systems, including guidelines for authentication\nof authorized access; (ii) privacy compliance standards; (iii) privacy and\nsecurity audits; (iv) procedures to follow in the event of a breach of student\ndata; and (v) data retention and disposition policies. The model plan and any\nupdates shall be made available to every school division.\n\nB. The Department of Education shall designate a chief data security officer,\nwith such state funds as made available, to assist school divisions, upon\nrequest, with the development and implementation of their own data security\nplans and to develop best practice recommendations regarding the use, retention,\nand protection of student data.\n\nHISTORY: 2015, c. 561.","edition":{"id":2,"name":"2026","slug":"2026","date_created":"2026-07-16 18:40:23","date_modified":"2026-08-02 15:14:36","current":1,"order_by":2,"last_import":"2026-08-02 12:37:30"}}