Education Laws and Regulations
603 CMR 23.00
23.05: Privacy and Security of Student Records
(1) The school principal or his/her designee shall be responsible for the privacy and security of all student records maintained in the school.
(2) The superintendent of schools or his/her designee shall be responsible for the privacy and security of all student records that are not under the supervision of a school principal, for example, former students' transcripts stored in the school department's central administrative offices or student records of school-age children with special needs who have not been enrolled in a public school.
(3) The principal and superintendent of schools shall insure that student records under their supervision are kept physically secure, that authorized school personnel are informed of the provisions of 603 CMR 23.00 and M.G.L. c. 71, § 34H and are educated as to the importance of information privacy and confidentiality; and that any computerized systems employed are electronically secure.
603 CMR 23.00: M.G.L. c. 71, 34D, 34E.