LexLint.ioBeta

Know the law your code answers to.

Law / United States / Idaho

Generative Artificial Intelligence in Education Act, vendor disclosure duty

Idaho Code section 33-7007

In force since .

An AI transparency rule binding private bodies.

Obligation class
Disclosure
Audit expectation
none

What it requires

  • This law is in effect since . If your generative AI, machine learning, or predictive analytics product is procured by an Idaho public school district or public charter school, disclose to the procuring school or district that the product uses machine learning, predictive analytics, or generative AI, and provide assurances regarding data protection, algorithmic transparency, and responsible use.
  • This section states no penalty, private right of action, or enforcement body for a vendor's disclosure failure, and the school district or charter school procuring your product must independently ensure the product complies with state and federal student data-privacy law, including FERPA, the Children's Internet Protection Act, and COPPA; the State Board of Education may separately adopt implementing rules under section 33-7008.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MEASURE 2.8Risks associated with transparency and accountability – as identified in the MAP function – are examined and documented.
NIST AI 600-1
MIT mitigations Draft
  • 4.1System Documentation
  • 4.2Risk Disclosure
  • 4.6User Rights & Recourse
FINOS AIGF
ETSI EN 304 223
  • 5.1.3-2Threats developers cannot resolve are passed to operators and on to end-users.
  • 5.3.1-1Users told where and how their data is used, accessed and stored, with developers informing operators.
  • 5.3.1-2.1That guidance covers proper use, limits and likely failure modes.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.

What it makes you log

Logging duty

Section 33-7007 requires a procured product to comply with student data-privacy law and requires a vendor to disclose whether the product uses machine learning, predictive analytics or generative artificial intelligence, and to provide assurances on data protection, algorithmic transparency and responsible use; it states no duty to create or keep a record of that use.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Idaho Code section 33-7007, part of the Generative Artificial Intelligence in Education Act (Idaho Code sections 33-7001 to 33-7008, enacted in 2026 as Senate Bill 1227, Session Law Chapter 71), requires that generative AI-related software, applications, and tools procured by local school districts and public charter schools comply with state and federal data privacy laws, including the Family Educational Rights and Privacy Act, the Children's Internet Protection Act, and the Children's Online Privacy Protection Act.

A vendor of such a product must disclose whether it utilizes machine learning, predictive analytics, or generative AI, and must provide assurances regarding data protection, algorithmic transparency, and responsible use. Senate Bill 1227 was signed by the Governor on , as Session Law Chapter 71, and took effect .

When LexLint raises it

When your app profile says your app generates content with AI or serves under-18s.

Back to the example  ·  Lint your app

Page updated .