Higher Education Student Information Protection Act (AB 1159, 2026)

HESIPA
enacted_not_effective

Extends K-12-style student data protections to college and university students: limits on targeted advertising, profiling, sale, disclosure, and AI training using student data, plus security and deletion duties. Operative July 1, 2027.

Jurisdiction

California

Jurisdiction Type

state

Country

United States

Effective Date

7/1/2027

Enforcing Authority

California Attorney General and local prosecutors; students actually harmed

Fines Under This Regulation

0

Total Fine Amount (USD)

--