Serves schools or universities, in New Jersey

Personal accounts of students and applicants, N.J.S.A. 18A:3-29 to 18A:3-32 (P.L.2012, c.75) · Read the law's page

• If you are a public or private institution of higher education in New Jersey, or its employee, agent, representative or designee, do not require a student or applicant to provide or disclose a user name or password, or otherwise give access to a personal account or service through an electronic communications device (N.J.S.A. 18A:3-30(a)).
• Do not inquire in any way whether a student or applicant has an account or profile on a social networking website (N.J.S.A. 18A:3-30(b)).
• Do not bar a student or applicant from activities you sanction, or otherwise discriminate or retaliate, because the student or applicant refused to provide or disclose a user name, password or other means of access to a personal account or service (N.J.S.A. 18A:3-30(c)).
• Do not require a student or applicant to waive or limit any protection under the act (N.J.S.A. 18A:3-31).

Online education services and student educational records, N.J. Stat. §§ 56:8-215 to 56:8-221 · Read the law's page

• If you operate a website, online service, online application or mobile application used primarily for K-12 school purposes and designed and marketed for K-12 school purposes, do not knowingly use information created or gathered by your service to amass a profile about a student for any purpose other than K-12 school purposes (N.J.S.A. 56:8-216(a)(1)).
• Do not knowingly sell or rent a student's information, including covered information, subject to the exceptions in the section (N.J.S.A. 56:8-216(a)(2)).
• Do not knowingly disclose covered information unless the disclosure falls within an exception in the section, for example a disclosure to a third party you bind by contract to use it only for the contracted service, not to disclose it further, and to maintain reasonable security (N.J.S.A. 56:8-216(a)(3)).
• Do not knowingly engage in targeted advertising on your service, or on any other Internet website, online service, online computer application or mobile application, based on information your service acquired because of its use for K-12 school purposes (N.J.S.A. 56:8-216(a)(4)).
• Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information, and protect it from unauthorized access, destruction, use, modification or disclosure (N.J.S.A. 56:8-217(a)-(b)).
• Delete covered information at the request of a K-12 school or school district overseeing the student's education through the service, or of a student who has reached the age of majority, unless the student after reaching majority, or a parent or guardian, requests that you maintain it (N.J.S.A. 56:8-217(c)).

N.J. A5529 (2026-2027), supplementing chapter 6 of Title 18A of the New Jersey Statutes · Read the law's page

• Ensure that every public school employee, and every individual performing services in a public school under a contract with a board of education or the board of trustees of a charter school or renaissance school project, is a natural person.

Student records access, N.J.A.C. 6A:32-7.5(a) and (e)(14) · Read the law's page

• If you are a school district, charter school or other body the subchapter covers, give access to student records only to the organizations, agencies and persons the section authorizes (N.J.A.C. 6A:32-7.5(a)).for a public body
• If you are an organization, agency or person outside the school that has access to student records on the written consent of a parent or adult student, do not transfer student record information to a third party without the written consent of the parent or adult student (N.J.A.C. 6A:32-7.5(e)(14)).
• For every inspection of a student record by a person other than a parent, the student or someone with assigned educational responsibility for the student, make an entry in the student record of the names of those granted access, the reason access was granted, the time and circumstances of the inspection, the records inspected and the purposes for which the data will be used (N.J.A.C. 6A:32-7.6(a)(3)).when it serves a public body

Student records, N.J.A.C. 6A:32-7.1 and 6A:32-7.4 · Read the law's page

• If you are a school district, charter school, renaissance school project, approved private school for students with disabilities or private agency providing publicly funded educational services, have the chief school administrator or the administrator's designee take responsibility for the security of student records and devise procedures that limit access to authorized persons (N.J.A.C. 6A:32-7.4(a)).for a public body
• When you store student records electronically, administer proper security and backup procedures (N.J.A.C. 6A:32-7.4(b)(1)).when it serves a public body
• Establish written policies and procedures for student records that assure their security, including the access and security of student records kept in an electronic system (N.J.A.C. 6A:32-7.1(g)(2) and (g)(9)).for a public body
• If you establish a website, do not disclose on it any personally identifiable information about a student (N.J.A.C. 6A:32-7.4(f)).when it serves a public body
• Enumerate and describe in those written policies the student records you collect and maintain, and maintain the confidentiality of all student records containing a student's name, Social Security number, address and telephone number (N.J.A.C. 6A:32-7.1(g)(3) and (g)(10)).for a public body