This legal and policy guidance provides a summary framework for state policymakers as they work to use longitudinal data to improve student achievement while also protecting the privacy and security of individual student records. Summarizing relevant federal privacy and security laws, with a focus on the Family Educational Records and Privacy Act (FERPA), this guidance illustrates how constraints placed on states by federal privacy and security laws can be harmonized with the appropriate use of student data for significant educational purposes. Finally, this guidance includes an overview of other relevant laws and key issues, including a discussion of federal laws that govern early education, workforce, and health information, along with suggested action steps policymakers should consider to ensure privacy and security while supporting the use of data. (Contains 39 footnotes.)