105 ILCS 13/30: Subject to privacy protection laws.

The collection, use, maintenance, disclosure, and sharing of data authorized by this Act must be conducted in accordance with privacy protection laws. The State Education Authorities shall each develop security measures and procedures that protect personal information from intentional or accidental release to unauthorized persons and from intentional or accidental use for unauthorized purposes.