1. "Personal information" shall have the same meaning as defined in section 407.1500.
2. In the event of a breach of data maintained in electronic form that includes personal information of a student, a school district shall send written notification to the parent or legal guardian of an affected student.
3. Notification of a breach of personal information of a student shall also be sent to the department of elementary and secondary education and the state auditor.