Law / United States / 
Louisiana
Student information: privacy, contractor duties and prohibitions on commercial use
In force.
A sensitive categories rule binding public and private bodies.
- Obligation class
- Prohibition, Governance, Security
- Audit expectation
- none
As of .
What it requires
- If you hold or can access personally identifiable student information, do not sell, transfer, share or process student data for commercial advertising, marketing or any other commercial purpose, unless a contract for school services stipulates otherwise.
- If you contract with a local public school board for student and other education services and receive student information, do not allow access to or release of it except as the contract specifies, and do not use it for predictive modeling that limits students' educational opportunities.
- Make your contract with the local public school board provide for authorizing and authenticating access to the systems storing student information, privacy compliance standards, privacy and security audits under the local school superintendent, breach planning, notification and remediation, storage, retention and disposition policies, and disposal of all information from your servers on termination, with the information returned to the school board.
- If you are authorized to access a public school computer system on which student information is stored, and are not a parent or legal guardian, maintain the confidentiality of the student information to which you have access.
- If you receive personally identifiable student information with written authorization of a parent, legal guardian or adult student, maintain its confidentiality.
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Criminal exposureYes
Criminal exposure note
A person who knowingly and willingly violates the contractor provisions of subsection F is fined not more than $10,000 or imprisoned for not more than three years, or both. A person who violates any other provision of the section is punished by imprisonment for not more than six months or a fine of not more than $10,000.
Penalty structure
Knowing and willing violation of the contractor provisions: a fine of not more than $10,000 or imprisonment for not more than three years, or both. Any other violation: imprisonment for not more than six months or a fine of not more than $10,000.
- Rule
- Fixed only
- As of
- Currency
- USD
- Fixed cap
- 10,000
What this law does
Under Revised Statutes 17:3914, no city, parish or other local public school system, local or state governmental agency, public or private entity, or person with access to personally identifiable student information may sell, transfer, share or process student data for use in commercial advertising or marketing or any other commercial purpose, unless a contract for school services stipulates otherwise.
Under Revised Statutes 17:3914, a contractor to which a local school board transfers student information may not allow access to or release of student information except as the contract specifies, and may not use student information to conduct predictive modeling for the purpose of limiting the educational opportunities of students.
Under Revised Statutes 17:3914, a contract by which a local school board transfers student information must at a minimum provide for access guidelines, privacy compliance standards, privacy and security audits directed by the local school superintendent, breach planning, notification and remediation procedures, information storage, retention and disposition policies, and disposal of all information from the contractor's servers on termination.
Under Revised Statutes 17:3914, a person authorized to access a public school computer system on which student information is stored, other than a parent or legal guardian, must maintain the confidentiality of the student information to which he has access.
Under Revised Statutes 17:3914, a person who knowingly and willingly violates the contractor provisions is fined not more than $10,000 or imprisoned for not more than three years, or both, and any other violation is punishable by imprisonment for not more than six months or a fine of not more than $10,000. Section 17:3914 of the Revised Statutes was created by Act 837 of 2014 and was most recently amended by Act 478 of 2025, effective .
When LexLint raises it
When your app profile says your app serves under-18s.