Privacy Law Library

Student Privacy (Student Online Personal Information Protection)

VT Student Privacy

Students · Children

Vermont's student privacy law, modeled on California's SOPIPA, stops edtech operators from using student information gathered for PreK-12 school purposes to target ads, build non-educational profiles, or sell student data. Operators must protect the data, delete it when a school asks, and publish their data practices.

Where
Vermont
Citation
9 V.S.A. ch. 62, subch. 3A (9 V.S.A. §§ 2443-2443f)
Status
In force
In force since
2020-07-01
Last amended
2027-01-01
Enforced by
Vermont Attorney General (Consumer Protection Act)
People can sue
Limited
Penalties
A violation is an unfair and deceptive act under 9 V.S.A. § 2453 (§ 2443f), so AG civil penalties of up to $10,000 per violation apply (§ 2458). A consumer who suffers damages from a § 2453 violation may be able to sue under 9 V.S.A. § 2461(b); the statute does not address this expressly. Starting Jan. 1, 2027, 2026 Act No. 138 gives the AG express rulemaking and investigation authority.
Applies to
  • Operators of internet websites, online services, online applications or mobile applications with actual knowledge that they are used primarily for PreK-12 school purposes and were designed and marketed for those purposes
  • Does not apply to general-audience websites, services or apps

What a privacy notice must say

  • Publicly disclose and give schools material information about collection, use and disclosure of covered information, such as a privacy policy or terms of service.9 V.S.A. § 2443b(3)

Rights it gives people

  • Delete a student's covered information within a reasonable time when the school or district requests it, unless the student or parent consents to keeping it.9 V.S.A. § 2443b(2)

Practices it requires

  • Do not target advertising based on information acquired through use of the service for PreK-12 school purposes.9 V.S.A. § 2443a(a)(1)
  • Do not use information to amass a profile about a student except in furtherance of PreK-12 school purposes.9 V.S.A. § 2443a(a)(2)
  • Do not sell, barter or rent a student's information; disclose covered information only for listed purposes such as school purposes, legal compliance or contractually restricted service providers.9 V.S.A. § 2443a(a)(3)-(4)

Security duties

  • Implement and maintain reasonable security procedures and practices appropriate to the nature of covered information.9 V.S.A. § 2443b(1)

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Research reference, not legal advice.