(1) The board shall ensure that higher education employees, student aides, and volunteers who have access to student data received under Title 53E, Chapter 9, Part 4, Data Sharing with Higher Education, shall receive training at least once every two years.
(2) The board shall consult with the State Board of Education to ensure the training required under this section covers:
(a) federal and state student data privacy laws;
(b) proper handling and protection of student data;
(c) data breach prevention and response procedures; and
(d) authorized uses and disclosure limitations for student data received under this part.