The Illinois Student Online Personal Protection Act (SOPPA) requires schools to notify parents within 30 days of a data breach and within 60 days if a third-party is responsible for the data breach.

Per SOPPA, a “breach” means the unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of covered information maintained by an operator or school. “Breach” does not include the good faith acquisition of personal information by an employee or agent of an operator or school for a legitimate purpose of the operator or school if the covered information is not used for a purpose prohibited by this Act or subject to further unauthorized disclosure.

If there is a data breach based on the SOPPA law, this would communicate that here. The families of the students impacted by the breach will be contacted by the district in a separate communication along with action steps.