605—13.3(90GA,HF2652) System security requirements.

1. 13.3(1)  Transmission.

   1. a. Ownership of video associated with the instance of an unholstered weapon is the sole property of the school district that purchased and installed the software.
   2. b. A request for duplication or transmission of an incident by the prosecuting attorney or appropriate law enforcement will be complied with.
   3. c. The decision to transmit to outside sources will be made by the school district with the concurrence of the prosecuting attorney or appropriate law enforcement authorization.
2. 13.3(2)  Encryption. Data collected by the system, including video, is encrypted in transit and at rest. Transport Layer Security (TLS) 1.2 or higher will be used for encryption in transit.
3. 13.3(3)  Authentication. Multifactor authentication (MFA) is implemented for administrative access to the system.
4. 13.3(4)  Privacy. Personally identifiable information, including student images, is not streamed live or stored with the vendor with the exception of rule 605—13.4(90GA,HF2652).
5. 13.3(5)  Storage. The system does not process, store, transmit, or allow access to, data from outside the continental United States (OCONUS).

[ARC 8906C, IAB 2/19/25, effective 3/26/25]