Student Test Taker Privacy Protection Act (SB-1172), limits the collection of personal data by proctoring services. The pandemic created a surge of online-proctoring services which utilize various types of personal information, such as a driver’s license, other identification and/or biometric data, to verify a student’s identity during a proctored exam. SB-1172 seeks to establish data protections for the online test taker. The Act prohibits a proctoring service from collecting, retaining, using, or disclosing personal information except to the extent necessary to provide the proctoring services.
Most higher education institutions use outside proctoring services (such as Proctorio, ProctorU, Exmanity and ExamSoft) to administer proctored online exams so the institutions would be directly responsible for regulating the information collected. However, higher education institutions should take steps to ensure that the proctoring services utilized adhere to the bill’s restrictions. Current proctoring service contracts should be analyzed and likely amended to at a minimum include that the service provider will not collect, retain, use or disclose student personal information except to the extent necessary to provide the proctoring services.