Cal. Education Code § 49083

(a) The California School Information Services program administrator shall submit to the State Board of Education a plan to administer, coordinate, and manage the development and implementation of an electronic statewide school information system to address current problems of information exchange. The plan shall be updated with State Board of Education approval annually. (b) The plan shall prescribe the set of statewide data elements and codes to be implemented by the California School Information Services. The data elements and codes that are prescribed to be implemented shall comply with Sections 49061 to 49079, inclusive, and Sections 49602 and 56347, with Sections 430 to 438, inclusive, of Title 5 of the California Code of Regulations, with the Information Practices Act of 1977 (Chapter 1 (commencing with Section 1798) of Title 1.8 of Part 4 of Division 3 of the Civil Code), and with the Family Education Rights and Privacy Act statute (20 U.S.C. Secs. 1232g and 1232h and related federal regulations. (c) The plan shall prescribe the statewide standards for security of the California School Information Services. Those standards shall include, but not be limited to, processes and procedures for handling both paper and electronic data, training for staff that handle the data, administrative management of the data system, and technical measures to secure the data contained in the electronic system. (d) The data elements and codes set forth in the plan approved by the State Board of Education, as transferred through any electronic statewide school information system, may not contain any questions of items that solicit or invite disclosure of the personal beliefs or practices of a pupil, or his or her parent or guardian, as to sex, family life, morality, or religion, nor may it contain any question designed to evaluate personal behavioral characteristics including, but not limited to, honesty, integrity, sociability, or self-esteem.