Serves schools or universities, in Maryland

Md. Code Ann., Educ. § 4-131 · Read the law's page

• If you are an operator of a website, online service, online application or mobile application used for a PreK-12 school purpose under a contract or agreement with a Maryland public school or local school system, protect covered information from unauthorized access, destruction, use, modification or disclosure, and implement and maintain reasonable security procedures and practices to protect it (Educ. 4-131(c)(1)-(2)).
• Delete covered information within a reasonable time if the public school or local school system requests deletion of covered information under its authority (Educ. 4-131(c)(3)).
• Do not knowingly engage in targeted advertising based on information, including covered information and persistent unique identifiers, that you acquired because of the use of your site, service or application (Educ. 4-131(d)(1)(i)).
• Do not knowingly use information created or gathered by your site, service or application to make a profile about a student, except in furtherance of a PreK-12 school purpose (Educ. 4-131(d)(1)(ii)).
• Do not knowingly sell a student's information, and stay bound by the section for covered information you already collected if your site, service or application is merged with or acquired by another entity (Educ. 4-131(d)(1)(iii) and (f)).
• Do not disclose covered information except as subsection (e) allows, for example to a recipient that will not further disclose it and must comply with these duties, to a service provider you bind by contract to use it only for the contracted service and to comply with these duties, or for legal compliance, judicial process, or the safety and security of users or the service (Educ. 4-131(d)(1)(iv) and (e)).
• To use or disclose covered information in a way subsections (d) and (e) would otherwise bar, other than by sale, give the student or the student's parent or guardian clear and conspicuous notice and obtain the affirmative consent of the student, if at least 18 years old, or of the parent or guardian (Educ. 4-131(h)).

Md. Code Ann., Educ. § 7-910(c)(2), (c)(4) and (g) · Read the law's page

• If you respond to an invitation for bids or request for proposals for a digital tool issued by the State Board of Education or a local school system, submit an accessibility conformance report that includes a Voluntary Product Accessibility Template and explains how your information and communication technology products, including software, electronic content and support documentation, conform to the most recent Section 508 standards (Educ. 7-910(c)(2)).
• Accept a procurement contract term requiring you to indemnify the State Board of Education or the local school system for liability and costs arising from the failure of the digital tool to meet section 7-910 (Educ. 7-910(c)(4)).
• If a local school system notifies you in writing, within 18 months after it developed or bought the digital tool, that the tool fails the equivalent access standards, including nonvisual access, modify the tool at your own expense to meet them within the time frame you agree with the local school system (Educ. 7-910(g)(1)).
• Indemnify the State Board or county board for liability resulting from the use of a digital tool that fails the equivalent access standards, including nonvisual access (Educ. 7-910(g)(2)(ii)).