Arkansas Code of 1987 (2023) › Title 6 - EDUCATION (§§ 6-1-101 — 6-87-104) › Subtitle 2 - ELEMENTARY AND SECONDARY EDUCATION GENERALLY (§§ 6-10-101 — 6-28-206) › Chapter 18 - STUDENTS (§§ 6-18-101 — 6-18-2608) › Subchapter 26 - STUDENT DATA VENDOR SECURITY ACT (§§ 6-18-2601 — 6-18-2608) › Section 6-18-2608 - Exceptions - Applicability

(a)
Notwithstanding any provision of this subchapter to the contrary, this subchapter does not prohibit the use of student personally identifiable information to:
(1)
Use adaptive learning or design personalized or customized education;
(2)
Maintain, develop, support, improve, or diagnose a school service contract provider's website, online service, online application, or mobile application;
(3)
Provide recommendations for school, educational, or employment purposes within a school service, so long as the response is not determined in whole or in part by payment or other consideration from a third party;
(4)
Respond to a student's request for information or for feedback so long as the information or response is not determined in whole or in part by payment or other consideration from a third party;
(5)
Identify for the student, only with the written consent of the student or the student's parent, institutions of higher education or scholarship providers that are seeking students who meet specific criteria, regardless of whether the identified institutions of higher education or scholarship providers provide consideration to the school service contract provider;
(6)
In accordance with the terms of a contract between the school service contract provider and a public education entity, produce and distribute, free or for consideration, student class photos and yearbooks only to the public education entity, students, parents, or individuals authorized by parents; or
(7)
(A)
Provide for the student, only with the express written consent of the student or the student's parent given in response to clear and conspicuous notice, access to employment opportunities, educational scholarships or financial aid, or postsecondary education opportunities, regardless of whether the school service contract provider receives consideration from one (1) or more third parties in exchange for the student personally identifiable information.
(B)
Subdivision (a)(7)(A) of this section applies only to a school service contract provider that provides nationally recognized assessments that postsecondary institutions of higher education use in making admissions decisions.
(b)
This subchapter does not:
(1)
Impose a duty on a provider of interactive computer service, as defined in
47 U.S.C. § 230
, as it existed on January 1, 2023, to review or enforce compliance with this subchapter by school service contract providers or school service on-demand providers;
(2)
Impede the ability of a student to download, export, or otherwise save or maintain his or her own student personally identifiable information or documents;
(3)
Limit internet service providers from providing internet connectivity to local education agencies or to students and their families;
(4)
Prohibit a school service contract provider from marketing educational products directly to parents so long as the marketing does not result from the use of student personally identifiable information obtained by the school service contract provider as a result of providing its website, online service, online application, or mobile application to a public education entity; or
(5)
Impose a duty on a provider of an electronic store, gateway, marketplace, or other means of purchasing or downloading software or applications to review or enforce compliance with this subchapter on that software or those applications.
(c)
The requirements in §
6-18-2605
and §
6-18-2607
shall apply to a school service contract provider that enters or renews a contract with a public education entity on or after June 1, 2024.
Added by Act 2023, No. 754,§ 1, eff. 6/1/2024.