Student Data Transparency and Security Act

Colorado's student privacy law requires education technology vendors under contract with public schools to disclose what student data they collect and why, use it only for contracted purposes, and never sell it or use it for targeted advertising. Vendors must maintain an information security program, notify schools of misuse, and destroy data on request or at contract end. Parents gain inspection, correction, and complaint rights.