Student Data Privacy (Act Concerning Student Data Privacy)

Requires school boards to sign written contracts with ed-tech vendors that keep student data under school control, limit use to school purposes, and require deletion and security. Ed-tech operators may not use student data for targeted advertising, sell it, or build non-school profiles, and both contractors and operators must report student data breaches within set deadlines.