(a) A parent shall have the right to inspect and review his or her child's education record maintained by the school or local board of education.

(b) A parent may request from the school or local board of education student data included in his or her child's education record, including student data maintained by an operator, except when the local board of education determines that the requested data maintained by the operator cannot reasonably be made available to the parent.

(c) Local boards of education shall provide a parent or guardian with an electronic copy of his or her child's education record upon request, unless the local board of education does not maintain a record in electronic format and reproducing the record in an electronic format would be unduly burdensome.

(d) A parent or eligible student shall have the right to request corrections to inaccurate education records maintained by a school or local board of education. After receiving a request demonstrating any such inaccuracy, the school or local board of education that maintains the data shall correct the inaccuracy and confirm such correction to the parent or eligible student within a reasonable amount of time.

(e) The rights contained in subsections (a) through (d) of this Code section shall extend also to eligible students seeking to access their own education records.

(f) The department shall develop model policies for local boards of education that:

(1) Support local boards of education in fulfilling their responsibility to annually notify parents of their right to request student information;

(2) Assist local boards of education with ensuring security when providing student data to parents;

(3) Provide guidance and best practices to local boards of education in order to ensure that local boards of education provide student data only to authorized individuals;

(4) Support local boards of education in their responsibility to produce education records and student data included in such education records to parents and eligible students, ideally within three business days of the request; and

(5) Assist schools and local boards of education with implementing technologies and programs that allow a parent to view online, download, and transmit data specific to his or her child's education record.

(g) (1) The department shall develop model policies and procedures for a parent or eligible student to file a complaint with a local school system regarding a possible violation of rights under this article or under other federal or state student data privacy and security laws which shall ensure that:

(A) Each local school system designates at least one individual with responsibility to address complaints filed by parents or eligible students;

(B) A written response is provided to the parent's or student's complaint;

(C) An appeal may be filed with the local school superintendent; and

(D) An appeal for a final decision may be made to the local board of education.

(2) Within six months of adoption by the department of model policies and procedures pursuant to paragraph (1) of this subsection, each local board of education shall adopt policies and procedures that include, at a minimum, such department model policies and procedures.

(h) Nothing in this Code section shall authorize any additional cause of action beyond the process described in this Code section or as otherwise authorized by state law.