HARRISBURG – With cyberattacks targeting schools on the increase, the PA Senate Education Committee advanced legislation from York County Sen. Kristin Phillips-Hill to strengthen protections for student data and digital privacy. Senate Bill 378 would establish clear rules for how student data is collected, stored, and shared, while increasing transparency for parents and accountability for schools and third-party vendors. In 2025, a major student information system provider used by school districts across the nation was hacked, exposing sensitive student data and leading to extortion attempts against schools. The U.S. Department of Education has also warned that K-12 schools are increasingly vulnerable to cyberattacks. Senate Bill 378 addresses concerns by clearly defining student data, establishing who owns it, and requiring stronger safeguards, disclosures, and limitations on how both schools and vendors can collect, use and share it. The bill moves to the full PA Senate.
SEN. KRISTIN PHILLIPS-HILL