Serves schools or universities, in Hawaii

Haw. Rev. Stat. Secs. 302A-499, 302A-500 · Read the law's page

• If you operate a website, online service, online application or mobile application that you know is used primarily for K-12 school purposes and was designed and marketed for them, do not knowingly engage in targeted advertising on it, and do not target advertising elsewhere using information you acquired through its use for K-12 school purposes (section 302A-500(a)(1)).
• Do not knowingly use information, including persistent unique identifiers, created or gathered by your site, service or application to amass a profile about a student, except in furtherance of K-12 school purposes (section 302A-500(a)(2)).
• Do not knowingly sell or rent a student's information, including covered information, except in the acquisition of your company by another entity that complies with the section for previously acquired student information (section 302A-500(a)(3)).
• Disclose covered information only for the purposes section 302A-500(a)(4) lists, and when you disclose it to a third party under paragraph (F), bind the third party by contract not to use it for any other purpose, not to pass it to subsequent third parties, and to implement and maintain reasonable security procedures and practices (section 302A-500(a)(4)(F)).
• When you disclose covered information in furtherance of the K-12 school purpose of your site, service or application, disclose it only to a recipient that does not further disclose it, unless done to allow or improve the operability and functionality of your site, service or application (section 302A-500(a)(4)(A)).
• Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information, designed to protect it from unauthorized access, destruction, use, modification or disclosure (section 302A-500(b)(1)).
• Delete a student's covered information within a reasonable time when the K-12 school or complex requests deletion of covered information under its control, unless a student or the student's parent or guardian consents to its maintenance (section 302A-500(b)(2)).