State postsecondary data systems contain a wealth of information--including detailed records about individuals--that allow states to analyze and improve their postsecondary education systems. The entities that maintain these systems operate in a context of concern about the privacy and security of educational records. They have both an interest in making valuable information available to researchers and policy analysts and a duty to protect sensitive data. This paper outlines the use of benchmark privacy and security processes, standards, and practices in state postsecondary data systems, using results from the 2020 administration of the State Higher Education Executive Officers Association's Strong Foundations survey. [For "Strong Foundations 2018: The State of State Postsecondary Data Systems," see ED598660.]