(1) An LEA shall adopt policies to protect student data in accordance with this part and state board rule, taking into account the specific needs and priorities of the LEA.
(2)
(a) An LEA shall designate an individual to act as a student data manager to fulfill the responsibilities of a student data manager described in Section 53E-9-308.
(b) If possible, an LEA shall designate the LEA's records officer as defined in Section 63G-2-103, as the student data manager.
(3) An LEA shall create and maintain an LEA:
(a) data governance plan; and
(b) metadata dictionary.
(4) An LEA shall establish an external research review process for a request for data for the purpose of external research or evaluation.