Serves K-12 schools, in California
Each law's tag says when it binds: since in force from , in 7 weeks not yet in force
Basic instructional materials: legible print, closed captioning, and Section 508 accessibility of internet resources and digital multimedia programssince 4 lines
Cal. Education Code section 60061.8 · Read the law's page
- If you publish or manufacture basic instructional materials offered on or after , use sharp, clear, high contrast and highly legible fonts in print materials, with fonts of at least 20 point for kindergarten, 18 point for grade 1 and 16 point for grade 2 (Educ. Code 60061.8(a)(1)).
- Closed-caption video products designed for pupils in kindergarten and grades 1 to 12, as closed captioning is defined by the Federal Communications Commission, except video products or portions of them for which you do not have the rights to close-caption and those that are open-captioned (Educ. Code 60061.8(a)(2)).
- Make internet resources and digital multimedia programs intended for use by the general population of pupils in kindergarten and grades 1 to 12 meet at least the accessibility standards of Section 508 of the Rehabilitation Act of 1973 and Part 1194 of Title 36 of the Code of Federal Regulations, unless meeting them would fundamentally alter the nature of the instructional activity, place an undue financial and administrative burden on the state agencies, school districts or schools that would likely access them (as determined by the affected agencies in collaboration with the publishers), or cause them to fail to meet standards otherwise required by statute or regulation (Educ. Code 60061.8(a)(3)(A)).
- To the extent technologically feasible, let the user of a digital multimedia program control the sizing of images and fonts, the speed and volume of audio, colors or contrast, and other inherently transformable attributes, without modifying the content; if you cannot create a program that does so, provide the State Department of Education, upon request, computer files or other electronic versions of the textual content of basic instructional materials compatible with braille transcription, meeting the department's specifications, at no additional cost and as a condition of sale (Educ. Code 60061.8(a)(3)(B)).
Printed instructional materials submitted for adoption: equivalent digital format conforming to Section 508 and the Web Content Accessibility Guidelinessince 2 lines
Cal. Education Code section 60063 · Read the law's page
- If you are a publisher or manufacturer that submits a printed instructional material on or after for adoption by the state board under section 60200 or by a school district governing board under section 60400, or for use by a school district governing board under section 60210, ensure the printed material is also available in an equivalent digital format during the entire term of the adoption (Educ. Code 60063(a)).
- Make the equivalent digital format conform to the most current, ratified standards under Section 508 of the federal Rehabilitation Act of 1973, as amended, and the Web Content Accessibility Guidelines adopted by the World Wide Web Consortium for accessibility (Educ. Code 60063(b)).
K-12 Pupil Online Personal Information Protection Act (KOPIPA)since 6 lines
Cal. Bus. and Prof. Code sections 22584 and 22585 · Read the law's page
- If you operate a site, service or application that you know is used primarily for K-12 school purposes and was designed and marketed for them, do not knowingly engage in targeted advertising on it, and do not target advertising elsewhere using information you acquired through its use (section 22584(b)(1)).
- Do not knowingly use information created or gathered by your site, service or application to amass a profile about a pupil, except in furtherance of K-12 school purposes (section 22584(b)(2)).
- Do not knowingly sell a pupil's information, including covered information, except in the acquisition of your company by another entity that remains bound by the section (section 22584(b)(3)).
- Disclose covered information only as section 22584(b)(4) permits, and when you disclose it to a service provider, bind the provider by contract not to use it for any other purpose, not to pass it to later third parties, and to maintain reasonable security procedures and practices (section 22584(b)(4)(E)).
- Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information (section 22584(d)(1)).
- Delete a pupil's covered information if the school or local educational agency requests deletion of data under its control, and delete covered information the Consumer Privacy Act does not cover when the parent or guardian, or a former pupil who is 18 or older, requests it after the pupil has been out of enrollment for at least 60 days (section 22584(d)(2) and (3)).
Early Learning Personal Information Protection Act (ELPIPA)since 5 lines
Cal. Bus. and Prof. Code sections 22586 and 22587 · Read the law's page
- If you operate a site, service or application that you know is used primarily for preschool or prekindergarten purposes and was designed and marketed for them, do not knowingly engage in targeted advertising on it, and do not target advertising elsewhere using information you acquired through its use (section 22586(b)(1)).
- Do not knowingly use information created or gathered by your site, service or application to amass a profile about a pupil, except in furtherance of preschool or prekindergarten purposes (section 22586(b)(2)).
- Do not knowingly sell a pupil's information, including covered information, except in the acquisition of your company by another entity that remains bound by the section (section 22586(b)(3)).
- Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information (section 22586(d)(1)).
- Delete a pupil's covered information if the preschool, prekindergarten or district requests deletion of data under its control (section 22586(d)(2)).
Student Test Taker Privacy Protection Act: proctoring services may collect only the personal information strictly necessarysince 3 lines
Cal. Business and Professions Code section 22588 · Read the law's page
- If you provide proctoring services in an educational setting, including a service that observes, monitors or administers an exam, collect, use, retain and disclose only the personal information strictly necessary to provide those services (section 22588(a) and (d)).
- You may go beyond that limit where it is necessary to comply with law, a court order or subpoena, or an agency inquiry, to cooperate with law enforcement or answer an emergency access request that meets the section's conditions, or to exercise or defend a legal claim (section 22588(b)).
- If a law enforcement agency directs you, under an approved investigation with an active case number, not to delete a consumer's personal information, keep it for 90 days and use or disclose it only in response to a court order or subpoena (section 22588(b)(3)).
School safety programs: no biometric information or required real-time location tracking, and developer privacy and disclosure dutiessince 6 lines
Cal. Education Code section 32280.5 · Read the law's page
- If you operate a web-based or app-based school safety program that a school implements under section 32280.5(a), do not use biometric information in the program and do not require pupils or staff to use or install an app that provides real-time location tracking (section 32280.5(a)(7)(B)).
- If you operate such a program, let first responders connect to the schoolsite's surveillance system through it only when a designated schoolsite administrator or staff member has requested law enforcement assistance for a situation involving imminent danger of serious physical injury or death to a person on school property (section 32280.5(a)(5)(B)).
- Keep the program's schoolsite grid map, multilayered digital map, Wi-Fi connection information, hierarchy of those with responsibility duties (including their names, titles, photographs and contact information) and emergency procedures confidential, except as otherwise required to implement the section (section 32280.5(d)).
- If you develop a school safety program that a school implements, implement best practices to protect the security and data of all pupils and staff listed in the program, consult the department, and comply with the Student Online Personal Information Protection Act and the federal Family Educational Rights and Privacy Act (section 32280.5(b)(1) to (3)).
- If you develop a school safety program that a school implements, make your contract with the school and the best practices you follow publicly available (section 32280.5(b)(4) and (5)).
- If you are a school that implements such a program, ensure the program developers do these things (section 32280.5(b)).for a public body
- The program duties below apply only to a web-based or app-based school safety program that a school implements under section 32280.5(a); the section encourages, and does not require, each public school, including a charter school, with 100 or more pupils to implement one by (section 32280.5(a)).
Pupil records: a person or organization given access to pupil records may not pass the information on without parental consentin force2 lines
Cal. Education Code section 49076(a)(3) · Read the law's page
- If a California school district gives you access to pupil records under Education Code section 49076, including as a contractor or consultant with a legitimate educational interest under a formal written agreement or contract for outsourced institutional services or functions, do not permit any other person, agency or organization access to information obtained from those records without the written consent of the pupil's parent, except as the federal Family Educational Rights and Privacy Act, state law and implementing regulations allow (section 49076(a)(1)(G) and (a)(3)).
- You may share that information within your own institution, agency or organization without prior parental consent only with persons who have a legitimate educational interest in it under section 99.31(a)(1) of Title 34 of the Code of Federal Regulations (section 49076(a)(3)).
Publishers and manufacturers of instructional materials: electronic versions of state-adopted literary titles for accessible mediain force3 lines
Cal. Education Code section 60061(a)(7) · Read the law's page
- If you are a publisher or manufacturer of instructional materials, provide to the state, at no cost, computer files or other electronic versions of each state-adopted literary title, and the right to transcribe, reproduce, modify and distribute the material in braille, large print if you do not offer a large print edition, recordings, American Sign Language videos for the deaf, or other specialized accessible media, exclusively for use by pupils with visual disabilities or other disabilities that prevent use of standard instructional materials (Educ. Code 60061(a)(7)).
- Provide the computer files or other electronic versions of adopted materials within 30 days of the state's request, and make the files for literary titles maintain the structural integrity of the standard instructional materials, be compatible with commonly used braille translation and speech synthesis software, and include corrections and revisions as may be necessary (Educ. Code 60061(a)(7)(A)).
- Provide computer files or other electronic versions of nonliterary titles, including science and mathematics, when technology is available to convert those materials to a format that maintains the structural integrity of the standard instructional materials and is compatible with braille translation and speech synthesis software (Educ. Code 60061(a)(7)(B)).
AB 1159 (2026), student personal information (KOPIPA, ELPIPA and the Higher Education Student Information Protection Act)from , in 7 weeks10 lines
AB 1159 (Ch. 182, Stats. 2026), Cal. Bus. and Prof. Code Sections 22584 to 22587.2 · Read the law's page
- If you operate a site, service or application, or work on behalf of an operator, that you know is used for K-12 school purposes and that is designed or marketed for them, do not engage in targeted advertising on it, and do not target advertising elsewhere using information you acquired through its use (Business and Professions Code Section 22584(a)(10), (b)(1)).
- Do not use covered information, including persistent unique identifiers, created or gathered by your site, service or application to train a generative artificial intelligence system or service or to develop an artificial intelligence system (Section 22584(b)(5)).
- Do not collect, use, retain or disclose covered information relating to a pupil's reproductive or sexual health, immigration status, or sexual orientation or gender identity (Section 22584(b)(6)).
- Do not use covered information to amass a profile about a pupil except in furtherance of K-12 school purposes, and do not sell a pupil's information except in an acquisition of your company or under a written contract that meets the section's conditions (Section 22584(b)(2), (3)).
- Disclose covered information only as Section 22584(b)(4) permits, and when you disclose it to a service provider, bind the provider by contract not to use it for any other purpose, not to disclose it to later third parties, and to maintain reasonable security procedures and practices (Section 22584(b)(4)(E)).
- Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information (Section 22584(d)(1)).
- Delete a pupil's covered information when the school or local educational agency requests deletion, and delete a former pupil's covered information that the California Consumer Privacy Act does not cover when the parent, education rights holder or guardian, or the former pupil if 18 or older, requests it and the pupil has been out of enrollment for at least 60 days (Section 22584(d)(2), (3)).
- Retain covered information only as long as reasonably necessary for the purpose it was collected, and keep a written data retention policy, available on request to a pupil, parent, guardian, education rights holder or K-12 personnel, stating the purposes, the retention purpose and a deletion timeframe (Section 22584(d)(4), (5)).
- If your service is used for preschool or prekindergarten purposes, Section 22586 sets parallel prohibitions and duties, and bars any sale of a child's information other than in an acquisition of your company (Section 22586(b)(3)).
- If your service is used for higher education purposes, Section 22587 sets parallel prohibitions and duties from , and also bars collecting, using, retaining or disclosing a student's precise geolocation information (Sections 22587(b)(6), 22587.2).