Law / United States / 
Rhode Island
Student data and cloud computing services: kindergarten through grade 12 student data
In force since .
A sensitive categories rule binding public and private bodies.
- Obligation class
- Prohibition, Contract terms
- Audit expectation
- none
As of .
What it requires
- If you provide a cloud computing service to an educational institution operating in Rhode Island, process the data of a student enrolled in kindergarten through twelfth grade for the sole purpose of providing the cloud computing service to the educational institution (section 16-104-1(b)).
- Do not process that student data for any commercial purposes, including advertising purposes that benefit you as the cloud computing service provider (section 16-104-1(b)).
- When you enter into a contract to provide such services, certify in writing that you will comply with section 16-104-1 (section 16-104-1(c)).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Settledness
- As of
What this law does
Section 16-104-1(b) of the Rhode Island General Laws requires any person who provides a cloud computing service to an educational institution operating within the state to process the data of a student enrolled in kindergarten through twelfth grade for the sole purpose of providing the cloud computing service to the educational institution.
Section 16-104-1(b) of the Rhode Island General Laws bars the processing of that student data for any commercial purposes, including advertising purposes that benefit the cloud computing service provider. Section 16-104-1(c) of the Rhode Island General Laws requires each cloud computing service that enters into a contract to provide such services to certify, in writing, that it will comply with the section.
Section 16-104-1(a)(4) of the Rhode Island General Laws defines student data as any information in any media or format created or provided by a student, or by a school board employee about a student in the course of using a cloud computing service, including the student's name, email address, postal address, email message, documents, unique identifiers, and metadata.
Section 16-104-1(a)(2) of the Rhode Island General Laws defines a cloud computing service provider as an entity other than a public elementary or secondary school that operates a cloud computing service. Section 16-104-1(a)(3) of the Rhode Island General Laws defines to process as to use, access, manipulate, scan, modify, transform, disclose, store, transmit, transfer, retain, aggregate, or dispose of student data.
Section 16-104-1 of the Rhode Island General Laws was enacted by Public Law 2014, chapter 188, section 2, and Public Law 2014, chapter 207, section 2. Public Law 2014, chapter 188 (H 7124 Substitute B) was enacted on . The 2014 act that added the student data and cloud computing chapter takes effect upon passage.
When LexLint raises it
When your app profile says your app serves under-18s.