Colorado § 22-16-110 - School service contract provider - data security - data destruction.
Full text of Colorado Colorado Revised Statutes § 22-16-110 — School service contract provider - data security - data destruction., with citation guidance and answers to common questions.
§ 22-16-110. School service contract provider - data security - data destruction.
(1) Each school service contract provider shall maintain a comprehensive information security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of student personally identifiable information. The information security program must make use of appropriate administrative, technological, and physical safeguards.
(2) During the term of a contract between a school service contract provider and a public education entity, if the contracting public education entity requests destruction of a student's student personally identifiable information collected, generated, or inferred as a result of the contract, the contracting school service contract provider shall destroy the information as soon as practicable after the date of the request unless:
(a) The school service contract provider obtains the consent of the student or the student's parent to retain the student's student personally identifiable information; or
(b) The student has transferred to another public education entity and the receiving public education entity has requested that the school service contract provider retain the student's student personally identifiable information.
(3) Following the termination or conclusion of a contract between a school service contract provider and a public education entity, the school service contract provider shall, within the time period specified in the contract, destroy all student personally identifiable information collected, generated, or inferred as a result of the contract. If the contract does not specify a period for destruction of student personally identifiable information, the contract provider shall destroy the information when the information is no longer needed for the purpose of the contract between the contract provider and the public education entity. The contract provider shall notify the public education entity of the date upon which all of the student personally identifiable information is destroyed.
Source: L. 2016: Entire article added, (HB 16-1423), ch. 355, p. 1473, § 1, effective August 10.
Frequently Asked Questions About Colorado § 22-16-110
What does Colorado Revised Statutes § 22-16-110 cover?
Section 22-16-110 ("School service contract provider - data security - data destruction.") is part of the Colorado Revised Statutes, the codified statutory law of Colorado. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.
How do I cite Colorado § 22-16-110?
A common citation format is "Colorado Revised Statutes § 22-16-110" (Colorado). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.
Is this the official text of Colorado law?
No. This page is for research and education and may not include the most recent amendments. For official current law, check the Colorado official source linked on this page or consult a licensed Colorado attorney.
How does Colorado § 22-16-110 apply to my situation?
Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Colorado can advise on how this section applies to you. Contact your state or local bar association for a referral.
Sources & Verification
Not legal advice. Verify against the official source and consult a licensed attorney in Colorado.