Student Data Privacy Laws
FERPA - The Family Educational Rights and Privacy Act
FERPA is a Federal law that protects the privacy of student education records. FERPA ensures parents have access to their child’s education record and restricts who can access and use student information.
Additional Resources
Student Privacy 101 (Video)
A Parents’ Guide to Student Data Privacy
COPPA - The Children's Online Privacy Protection Act
COPPA controls what information is collected from young children by companies operating websites, games, and mobile applications. It applies to online products directed toward children under 13 or when the company knows that a user is under 13.
Additional Resources
PA 16-189 - Public Act No. 16-189, an Act Concerning Student Data Privacy for the State of Connecticut
This new student data privacy legislation took effect in Connecticut on October 1, 2016. This act restricts how student information and content may be used by entities that contract to provide educational software and electronic storage of student records and operators of websites, online services, or mobile applications.
Summary of PA 16-189: This act restricts how student information, student records, or student-generated content may be used by (1) contractors that provide student data services to boards of education and (2) certain operators of websites, online services, or mobile applications (“apps”).
For contractors, the act establishes requirements for contract content; contract execution notice to parents and guardians; and protection, deletion, and use of student information.
The act requires operators of websites, online services, or apps to maintain reasonable security practices to protect student information and delete student information upon student, parent, guardian, or board of education request. It prohibits, with some exceptions, operators from engaging in targeted advertising, creating student profiles for purposes unrelated to school, or selling or disclosing student information. However, the act allows operators to use some student information and de-identified student information for purposes related to student learning or product operational improvements.
The act also prescribes how contractors and operators must respond to security breaches involving student information, directory information, student records, or student-generated content in their possession.
Additionally, the act establishes a task force to study student data privacy issues.
Additional Resources