§ 8101 Short title.
This chapter may be known and cited as the “Education Privacy Act.”
§ 8102 Definitions.
(a) “Academic institution” means public or nonpublic institution of higher education or institution of postsecondary education.
(b) “Applicant” means a prospective student applying for admission into the subject academic institution.
(c) “Electronic communication device” means a cell telephone, personal digital assistant, electronic device with mobile data access, laptop computer, pager, broadband personal communication device whether mobile or desktop, 2-way messaging device, electronic game, or portable computing device.
(d) “Social networking site” means an Internet-based, personalized, privacy-protected website or application whether free or commercial that allows users to construct a private or semi-private profile site within a bounded system, create a list of other system users who are granted reciprocal access to the individual’s profile site, send and receive email, and share personal content, communications, and contacts.
(e) “Student” means a person which at all relevant times is admitted into the academic institution.
§ 8103 Academic institution; prohibited acts.
(a) An academic institution shall not request or require that a student or applicant disclose any password or other related account information in order to gain access to the student’s or applicant’s social networking site profile or account by way of an electronic communication device.
(b) An academic institution shall not require or request that a student or applicant log onto a social networking site, mail account, or any other internet site or application by way of an electronic communication device in the presence of an agent of the institution so as to provide the institution access.
(c) No public or nonpublic academic institution shall monitor or track a student’s or applicant’s personal electronic communication device by installation of software upon the device, or by remotely tracking the device by using intercept technology.
(d) An academic institution shall not request or require a student or applicant to add the employer or its representative to their personal social networking site profile or account.
(e) An academic institution is prohibited from accessing a student’s or applicant’s social networking site profile or account indirectly through any other person who is a social networking contact of the student or applicant.
§ 8104 Academic institution; wrongful dismissal or refusal to admit.
An academic institution may not discipline, dismiss or otherwise penalize or threaten to discipline, dismiss or otherwise penalize a student for refusing to disclose any information specified in § 8103(a) or (b) of this title. It shall also be unlawful for a public or nonpublic academic institution to fail or refuse to admit any applicant as a result of the applicant’s refusal to disclose any information specified in § 8103(a) or (b) of this title.
§ 8105 Health and safety exceptions.
This chapter shall not apply to investigations conducted by an academic institution’s public safety department or police agency who have a reasonable articulable suspicion of criminal activity, or to an investigation, inquiry or determination conducted pursuant to an academic institution’s threat assessment policy or protocol.