Online Education Services and Student Educational Records Act (student data privacy)

This student data privacy law bars K-12 ed-tech operators from using students' information for targeted advertising, building non-school profiles, or selling or renting it, and limits when they may disclose it. Operators must secure student data and delete it at the request of the school, the district, or a student who has turned 18.