Serves schools or universities, in Virginia

Va. Code Ann. § 22.1-289.01 · Read the law's page

• If you are a school service provider or school technology provider operating a school service or providing school-issued devices under a contract with a local school division in Virginia (or a school board or school providing school-issued devices independently), give clear and easy-to-understand information about the types of student personal information you collect and how you maintain, use or share it, keep a privacy policy for each school service or school-issued device, and give prominent notice before making material changes to it (section 22.1-289.01(B)(1) and (2)).
• Maintain a comprehensive information security program reasonably designed to protect the security, privacy, confidentiality and integrity of student personal information, with appropriate administrative, technological and physical safeguards, and require any successor entity or third party you contract with to abide by your privacy policy and security program before it accesses student personal information (section 22.1-289.01(B)(3) and (7)).
• Facilitate access to and correction of student personal information by the student or, if the student is under 18, the parent, and on request provide an electronic copy in a manner consistent with the functionality of the service or device (section 22.1-289.01(B)(4) and (10)).
• Collect, maintain, use and share student personal information only with the consent of the student or, if under 18, the parent, or for the purposes the contract with the school division authorizes, and obtain that consent (or, for information collected from someone other than the student, the school division's consent) before using it in a manner inconsistent with your privacy policy (section 22.1-289.01(B)(5) and (6)).
• On the request of the school or school division, delete student personal information within a reasonable time unless the student or parent consents to its maintenance, and delete student personal information stored on a returned school-issued device before the device is reissued or transferred (section 22.1-289.01(B)(8) and (9)).
• Do not knowingly use or share student personal information for targeted advertising to students, use or share it to create a personal profile of a student other than for authorized elementary and secondary school purposes, or sell it (except to a successor entity), and do not use a school-issued device, or let a school board or other entity use it, to access or monitor location-tracking features, audio or visual features or student interactions except as subdivision C 4 permits (section 22.1-289.01(C)).
• To rely on the section's allowance for disclosing student personal information to a service provider under a contract, contractually prohibit the service provider from using it for any purpose other than providing the contracted service to or on behalf of you, contractually prohibit it from disclosing it to any third party unless subdivision B 7 permits, and require it to comply with the requirements of subsection B and the prohibitions of subsection C (section 22.1-289.01(D)(5)).

Va. Code Ann. § 23.1-405(D), (E) · Read the law's page

• If you are a public institution of higher education, do not sell students' personal information, including names, addresses, phone numbers and email addresses, to any person, except in transactions involving credit, debit, employment, finance, identity verification, risk assessment, fraud prevention or other transactions initiated by the student (Va. Code Ann. 23.1-405(D)).for a public body
• If you are a public or private institution of higher education, do not require a student to disclose the username or password to any of the student's personal social media accounts; an account the student opened at the institution's request, or one the institution provides, such as the student's email account, is not a personal social media account (Va. Code Ann. 23.1-405(A), (E)).

Va. Code Ann. § 22.1-241(B) · Read the law's page

• If you publish textbooks or other high-quality instructional materials that the Board of Education has approved for use in Virginia public schools, expect each local school board contract or purchase order with you to require you to furnish electronic files of the materials in the NIMAS format, for deposit in the National Instructional Materials Access Center so that accessible versions can be made for students with print disabilities (Va. Code Ann. 22.1-241(B)).
• Deliver the NIMAS files on or before the date you deliver the regular text versions (Va. Code Ann. 22.1-241(B)).
• If you publish materials approved for use in grades 6-12, allow in your contract or purchase order the purchase of printed materials, printed materials with electronic files, or electronic materials separate and apart from printed versions (Va. Code Ann. 22.1-241(B)).
• If you are a local school board, include in each contract or purchase order with a publisher of Board-approved textbooks and other high-quality instructional materials a requirement that the publisher furnish electronic files of the materials in the NIMAS format (Va. Code Ann. 22.1-241(B)).