{"resourceId":"new-mexico-ped-proposed-student-data-privacy-rule-ai-training-amira-20261102","versions":[{"version":"external-f3b7c55079aea834e0c59d3070a8564e6c4a4a81e0dc80f6a7027c4bd5dbf7ec","resource":{"id":"new-mexico-ped-proposed-student-data-privacy-rule-ai-training-amira-20261102","title":"New Mexico's proposed student data privacy rule would allow contract-authorized AI training on student data and exclude existing vendor contracts","organization":"New Mexico Public Education Department (reported by Organ Mountain News)","sector":"State K-12 student data privacy regulation","geography":"New Mexico, United States","publishedAt":"Nov 2, 2026","publicationDate":"2026-11-02","eventDate":"2026-11-02","sourceName":"Organ Mountain News","sourceLabel":"Local news reporting","sourceUrl":"https://www.organmountainnews.com/new-mexico-student-data-privacy-rule-amira-ai-2026/","evidenceClass":"independent-reporting","outcomeClass":"mixed","topics":["data-security","governance-procurement"],"finding":"In written responses, PED said proposed rule 6.11.3 NMAC would not categorically prohibit using student data to train or improve AI tools that support a contracted educational service, if the contract authorizes it; vendors cannot justify use simply as improving their service. The rule would not retroactively cover existing vendor contracts. PED said Amira reading assessment recordings used in Las Cruces are not biometric voiceprints, though they remain protected student information. Parents get written notice before biometric collection, but affirmative consent only where other law requires. Comment runs through Nov. 20, hearings Nov. 19-20, effective April 1, 2027 if adopted. Las Cruces had already disabled Amira recording retention and obtained deletion confirmation.","sledRelevance":"A live state rulemaking that sets how K-12 AI vendors may use student data, with a near-term comment window.","evidence":"Local reporting of PED written responses and prior district actions. The rule text itself was not opened.","architectureImplications":"Interpretation: contracts must explicitly define any AI training use, and systems must support retention settings like those Las Cruces changed.","governanceImplications":"Notice rather than universal opt-in consent; existing contracts are grandfathered.","securityPrivacyImplications":"Distinguishes speech recordings from biometric voiceprints while keeping them protected student information.","caveats":"Proposed rule may change after comment; the article does not establish whether Amira trains on New Mexico data.","streamIds":["k12"],"roles":{"sales":"The framing point is that New Mexico's proposed rule would permit contract-authorized AI training on student data while leaving existing contracts untouched, so districts need contract terms that state exactly what is allowed. A bounded engagement is a review of AI vendor contracts against the proposed rule before its April 2027 effective date. This evidence cannot support claims that any vendor is or is not training on New Mexico student data.","engineering":"Fit is data handling controls for AI edtech, including retention settings and limits on training use. Interpretation: engineers should inventory which tools record student voice or content, confirm retention and deletion options, and document any AI training clauses. Proof of value would be demonstrating a deletion workflow and retention-off configuration like Las Cruces's Amira change, because the rule text was not reviewed here and may change.","delivery":"Delivery work is preparing districts for the rule: contract inventory, renegotiation of AI training terms, parental notice templates for biometric collection and retention reviews. District privacy, legal and technology staff would own it. Interpretation: acceptance criteria could include every AI vendor contract reviewed and notice templates ready by April 2027. Risks include grandfathered contracts, consent disputes and unclear AI training definitions."},"roleDetails":{"sales":{"customerProblem":"Districts must govern how AI vendors use student data under a new state rule that grandfathers existing contracts.","stakeholders":["District privacy officer","Legal counsel","Technology director","Parents","PED"],"discoveryQuestions":["Which contracts permit AI training on student data?","Which tools record student voice?","How will biometric notice be delivered?"],"valueHypothesis":"Contract review could close gaps before the rule takes effect.","potentialEngagement":"AI vendor contract and data-retention review against proposed 6.11.3 NMAC.","unsupportedClaims":["That Amira trains on New Mexico data","Final rule content","Compliance cost savings"]},"engineering":{"fit":"Retention, deletion and data-use controls for AI edtech.","architectureIntegration":"Interpretation: map data flows from tools to vendors and enforce retention-off settings where possible.","prerequisites":["Tool inventory","Vendor data processing details","Contract repository"],"constraints":["Rule only proposed","Existing contracts not covered","New Mexico only"],"security":"Recordings tied to student identity remain protected even when not biometric.","proofOfValue":["Demonstrated deletion confirmation","Retention-off configuration test","Contract clause audit"]},"delivery":{"work":"Inventory contracts, update AI training clauses, prepare notices and retention policies.","dependencies":["Final rule text","Vendor cooperation","Legal review"],"ownership":"District privacy officer with legal and technology staff.","skillsAdoption":"Staff need training on distinguishing biometric data from other protected student information.","governanceCheckpoints":["Public comment by Nov. 20","Rule adoption","April 1, 2027 effective date"],"acceptanceCriteria":["All AI vendor contracts reviewed","Notice templates approved","Retention settings documented"],"risks":["Grandfathered contracts","Parent consent disputes","Ambiguous AI training scope"]}},"retrievedAt":"2026-11-03T22:00:12-06:00","enrichedAt":"2026-11-03T22:01:52-06:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"PED cited concern that opt-in consent could exclude students from instructional tools; LCPS offered a paper alternative.","procurementImplications":"New contracts must explicitly authorize any AI training use of student data.","operatingModelImplications":"Interpretation: privacy officers become gatekeepers for AI vendor data use terms.","sourceVerification":{"openedUrl":"https://www.organmountainnews.com/new-mexico-student-data-privacy-rule-amira-ai-2026/","referenceExcerpt":"The proposed rule does not categorically prohibit using student data to train, develop, or improve AI tools that support the contracted educational service","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}