Serves colleges and universities, in California

Cal. Education Code sections 99120 to 99122 · Read the law's page

• If you are a public or private postsecondary educational institution, or an employee or representative of one, do not require or request a student, prospective student or student group to disclose a user name or password for personal social media, to access personal social media in your presence, or to divulge any personal social media information (section 99121(a)).
• Do not suspend, expel, discipline, threaten or otherwise penalize a student, prospective student or student group for refusing a request or demand that violates the section (section 99121(b)).
• These limits do not affect your existing rights and obligations to protect against and investigate alleged student misconduct or violations of applicable laws and regulations, and do not bar adverse action against a student, prospective student or student group for any lawful reason (section 99121(c)).
• If you are a private nonprofit or for-profit postsecondary educational institution, post your social media privacy policy on your Internet Web site (section 99122).

Cal. Business and Professions Code section 22588 · Read the law's page

• If you provide proctoring services in an educational setting, including a service that observes, monitors or administers an exam, collect, use, retain and disclose only the personal information strictly necessary to provide those services (section 22588(a) and (d)).
• You may go beyond that limit where it is necessary to comply with law, a court order or subpoena, or an agency inquiry, to cooperate with law enforcement or answer an emergency access request that meets the section's conditions, or to exercise or defend a legal claim (section 22588(b)).
• If a law enforcement agency directs you, under an approved investigation with an active case number, not to delete a consumer's personal information, keep it for 90 days and use or disclose it only in response to a court order or subpoena (section 22588(b)(3)).

Cal. Education Code section 67302 · Read the law's page

• If you publish or manufacture printed instructional materials for students attending the University of California, the California State University or a California Community College, provide the university, college or campus, for use by those students, any printed instructional material in an electronic format mutually agreed upon by you and the college or campus, at no additional cost and in a timely manner, upon receipt of a written request that meets the section's conditions (Educ. Code 67302(a)).
• Make the computer files or electronic versions of printed instructional materials maintain the structural integrity of the printed material, be compatible with commonly used braille translation and speech synthesis software, and include corrections and revisions as may be necessary (Educ. Code 67302(a)).
• If you publish or manufacture nonprinted instructional materials for those students, provide computer files or other electronic versions of them on the same conditions as for printed materials, when technology is available to convert them to a format that maintains their structural integrity and is compatible with braille translation and speech synthesis software (Educ. Code 67302(d)).

AB 1159 (Ch. 182, Stats. 2026), Cal. Bus. and Prof. Code Sections 22584 to 22587.2 · Read the law's page

• If you operate a site, service or application, or work on behalf of an operator, that you know is used for K-12 school purposes and that is designed or marketed for them, do not engage in targeted advertising on it, and do not target advertising elsewhere using information you acquired through its use (Business and Professions Code Section 22584(a)(10), (b)(1)).
• Do not use covered information, including persistent unique identifiers, created or gathered by your site, service or application to train a generative artificial intelligence system or service or to develop an artificial intelligence system (Section 22584(b)(5)).
• Do not collect, use, retain or disclose covered information relating to a pupil's reproductive or sexual health, immigration status, or sexual orientation or gender identity (Section 22584(b)(6)).
• Do not use covered information to amass a profile about a pupil except in furtherance of K-12 school purposes, and do not sell a pupil's information except in an acquisition of your company or under a written contract that meets the section's conditions (Section 22584(b)(2), (3)).
• Disclose covered information only as Section 22584(b)(4) permits, and when you disclose it to a service provider, bind the provider by contract not to use it for any other purpose, not to disclose it to later third parties, and to maintain reasonable security procedures and practices (Section 22584(b)(4)(E)).
• Implement and maintain reasonable security procedures and practices appropriate to the nature of the covered information (Section 22584(d)(1)).
• Delete a pupil's covered information when the school or local educational agency requests deletion, and delete a former pupil's covered information that the California Consumer Privacy Act does not cover when the parent, education rights holder or guardian, or the former pupil if 18 or older, requests it and the pupil has been out of enrollment for at least 60 days (Section 22584(d)(2), (3)).
• Retain covered information only as long as reasonably necessary for the purpose it was collected, and keep a written data retention policy, available on request to a pupil, parent, guardian, education rights holder or K-12 personnel, stating the purposes, the retention purpose and a deletion timeframe (Section 22584(d)(4), (5)).
• If your service is used for preschool or prekindergarten purposes, Section 22586 sets parallel prohibitions and duties, and bars any sale of a child's information other than in an acquisition of your company (Section 22586(b)(3)).
• If your service is used for higher education purposes, Section 22587 sets parallel prohibitions and duties from July 1, 2027, and also bars collecting, using, retaining or disclosing a student's precise geolocation information (Sections 22587(b)(6), 22587.2).