Serves K-12 schools, in Minnesota

Minn. Stat. § 13.32, subdivisions 13 to 15 · Read the law's page

• If you are a technology provider, that is, a person who contracts with a public educational agency or institution to provide a school-issued device for student use and who creates, receives or maintains educational data under or incidental to the contract, comply with section 13.05, subdivision 11 as if you were a government entity.
• Do not sell, share or disseminate educational data, except as section 13.32 provides or as part of a valid delegation or assignment of your contract, and do not use educational data for any commercial purpose, including marketing or advertising to a student or parent.
• If educational data you maintain are subject to a breach of the security of the data, disclose to the public educational agency or institution all information necessary to fulfill the requirements of section 13.055.
• Unless renewal of the contract is reasonably anticipated, within 90 days of the expiration of the contract destroy or return to the public educational agency or institution all educational data created, received or maintained under or incidental to the contract.
• Have a contract with the public educational agency or institution that requires appropriate security safeguards, including that your employees or contractors have access to educational data only if authorized and only when necessary to fulfill their official duties.
• Do not electronically access or monitor the location-tracking feature of a school-issued device, its audio or visual features, or student interactions with it (including keystrokes and web-browsing activity), except for a noncommercial educational purpose with advance notice, under a judicial warrant, for a missing or stolen device, for an imminent threat to life or safety, to comply with law, or to take part in federal or state funding programs; after access for an imminent threat, notify the student or parent within 72 hours.