Serves schools or universities, in Tennessee

Tenn. Code Ann. sec. 49-1-706 · Read the law's page

• If you are a state agency or an educational institution, obtain written consent from the student's parent or guardian, or from the student if the student is eighteen or older, before collecting any individual student biometric data, unless state or federal law explicitly mandates the collection (section 49-1-706(a)).
• Obtain the same written consent before collecting student data relative to analysis of facial expressions, EEG brain wave patterns, skin conductance, galvanic skin response, heart-rate variability, pulse, blood volume, posture or eye-tracking (section 49-1-706(a)).
• Do not pursue or accept a grant, from the federal government or any private entity, that requires collecting or reporting information in violation of the consent rule (section 49-1-706(b)).
• Do not adopt or administer a state or national student assessment that requires collecting or reporting information in violation of the consent rule (section 49-1-706(c)).for a public body

Tenn. Code Ann. secs. 49-1-702, 49-1-708 · Read the law's page

• As the operator of an Internet web site, online service, online application, or mobile application that you know is used primarily for K-12 school purposes and is designed and marketed for K-12 school purposes, do not knowingly engage in targeted advertising on your site, service, or application, or target advertising on any other site, service, or application based on information, including covered information and persistent unique identifiers, you acquired because of its use for K-12 school purposes (section 49-1-708(a)(1)).
• Do not knowingly use information, including persistent unique identifiers, created or gathered by your site, service, or application to amass a profile about a student except in furtherance of K-12 school purposes (section 49-1-708(a)(2)).
• Do not knowingly sell or rent a student's information, including covered information (section 49-1-708(a)(3)).
• Do not knowingly disclose covered information unless the disclosure is made in furtherance of the K-12 school purpose of your site, service, or application, to ensure legal and regulatory compliance or protect against liability, to respond to or participate in the judicial process, to protect the safety or integrity of users or the security of your site, service, or application, for a school, educational, or employment purpose requested by the student or the student's parent or guardian, or to a third party that you contractually bar from using covered information for any other purpose or from further disclosing it and that must maintain reasonable security procedures and practices (section 49-1-708(a)(4)).
• Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information, designed to protect it from unauthorized access, destruction, use, modification, or disclosure (section 49-1-708(c)(1)).
• Delete a student's covered information within a reasonable time if the K-12 school or local education agency requests deletion of covered information under its control, unless a student or parent or legal guardian consents to its maintenance (section 49-1-708(c)(2)).

Course Access Program Act, Tenn. Code Ann. secs. 49-18-102 and 49-18-105 · Read the law's page

• If you seek Tennessee state board of education approval as a course provider under the Course Access Program Act, provide an assurance that all information and resources for your extended learning, in person, online or blended learning courses are fully accessible for students of all abilities (section 49-18-105(a)(4)).
• Make that assurance cover a review of every course you submit for approval against legal accessibility standards, an accessibility online learning policy you have created and promulgated, an Americans with Disabilities Act Section 504 coordinator with a grievance policy and annual notifications, and policies and activities that keep your organizational and course websites meeting accessibility requirements (section 49-18-105(a)(4)).
• The state board or the department may exclude you as a provider at any time on finding that you have failed to comply with the chapter, the state board's rules or the department's procedures (section 49-18-105(b)).