1. The Department shall adopt any policies and procedures necessary to ensure the privacy of data concerning pupils which are consistent with relevant state and federal privacy laws, including, without limitation, the Family Educational Rights and Privacy Act of 1974, 20 U.S.C. § 1232g, and any regulations adopted pursuant thereto.
2. At least once each biennium, the Department shall review and revise as necessary the policies and procedures described in subsection 1.