Higher Education Act, institution's release of Student Aid Report and tax return information with the applicant's consent 20 U.S.C. 1098h(c) 5
Higher Education Act, limits on an institution's use and sharing of FAFSA information 20 U.S.C. 1090(a)(3)(C) to (E) 5
Student Assistance General Provisions, limits on student information shared with a third-party servicer or financial institution for title IV payments 34 CFR 668.164(e)(2)(ii) and (f)(4)(i) 5
Children's Internet Protection Act, the Internet safety policy of a school or library that receives discounts for Internet access, on monitoring minors' online activities and on unauthorized disclosure of minors' personal information 47 U.S.C. 254(h)(5), (6) and (l); 47 CFR 54.520 4
Family Educational Rights and Privacy Act (FERPA), disclosure of education records to contractors and redisclosure limits 20 U.S.C. 1232g(b); 34 CFR 99.31(a)(1)(i)(B), 99.33 4
Higher Education Act, limits on a State higher education agency's use and sharing of FAFSA information 20 U.S.C. 1090(a)(3)(B) 3
4
Clery Act regulations, confidentiality of victims in timely warnings and publicly available recordkeeping 34 CFR 668.46(b)(11)(iii) and (e)(1) 3
Section 504 regulations, postsecondary admissions: no preadmission inquiry whether an applicant is handicapped 34 CFR 104.42(b)(4) and (c) 3
Technology provider student data and education records use Ohio Rev. Code Sec. 3319.326 1
7
8
Monitoring of school-issued devices Ohio Rev. Code Sec. 3319.327 6
6
Confidentiality of student records and directory information Ohio Rev. Code Sec. 3319.321 5
Kent State University, collection, retention and dissemination of information about students Ohio Admin. Code 3342-5-08, 3342-5-08.101, 3342-5-08.102 and 3342-5-08.2 5
5
Zane State College, privacy of student records Ohio Admin. Code 3357:12-11-03 4
5
Bowling Green State University, library privacy and confidentiality Ohio Admin. Code 3341-3-62 4
4
Cuyahoga Community College, procedure on student education records Ohio Admin. Code 3354:1-30-02.2 4
4
Ohio Administrative Code, accessible instructional material for students with print disabilities: textbook publishers and local education agencies Ohio Admin. Code 3301-51-21 1
3
4
Ohio textbook publishers, NIMAS electronic files for students with print disabilities Ohio Rev. Code Sec. 3329.01 4
4
Youngstown State University, digital accessibility standard Ohio Admin. Code 3356-4-22 4
4
Youngstown State University, requests for student directory information from external organizations Ohio Admin. Code 3356-8-04.1 3
4
Bowling Green State University, digital and web accessibility Ohio Admin. Code 3341-6-57 3
3
Bowling Green State University, FERPA rights Ohio Admin. Code 3341-3-41 3
3
Bowling Green State University, sensitive data privacy Ohio Admin. Code 3341-6-39 3
Central Ohio Technical College, notification of rights under FERPA Ohio Admin. Code 3357:3-6-02 3
3
Cleveland State University, electronic and information technology accessibility standards Ohio Admin. Code 3344-6-01 3
3
Miami University, accessible technology Ohio Admin. Code 3339-19-08 3
3
Ohio University, verification of student identity Ohio Admin. Code 27 December 3337 3
3
Student fingerprinting program for missing-child identification Ohio Rev. Code Sec. 3313.96 3
University of Toledo, confidentiality of student records Ohio Admin. Code 3364-71-15 3
3
University of Toledo, technology accessibility Ohio Admin. Code 3364-15-15 3
3
Wright State University, privacy and release of student educational records Ohio Admin. Code 3352-4-03 3
3
Youngstown State University, privacy and release of student education records Ohio Admin. Code 3356-8-04 3
3
Clark State College, student privacy policy Ohio Admin. Code 3358:5-9-05 2
2
Cleveland State University, administrative data policy Ohio Admin. Code 3344-8-02 2
2
Cleveland State University, evaluation of electronic and information technology for access by persons with disabilities before purchase Ohio Admin. Code 3344-65-09(B) 2
2
Cuyahoga Community College, online accessibility procedure Ohio Admin. Code 3354:1-30-02.3 2
2
Education management information system, confidentiality of personally identifiable student data Ohio Rev. Code Sec. 3301.0714 2
Kent State University, electronic and information technology accessibility Ohio Admin. Code 3342-4-16 2
2
Lakeland Community College, confidentiality and review of student records Ohio Admin. Code 3354:2-63-01 2
2
Northeast Ohio Medical University, university data Ohio Admin. Code 3349-9-18 2
2
Northwest State Community College, student records Ohio Admin. Code 3358:14-7-06 2
2
Owens Community College, directory information disclosure policy Ohio Admin. Code 3358:11-3-61 2
2
Owens Community College, student records review policy Ohio Admin. Code 3358:11-3-13 2
2
Privacy of student data in state testing Ohio Rev. Code Sec. 3301.947 2
University of Cincinnati, records: rights of privacy, general policy and procedure statement Ohio Admin. Code 3361:10-43-11 2
2
Clark State College, website policy Ohio Admin. Code 3358:5-11-25(F) 1
1
Confidentiality of early childhood program student data Ohio Rev. Code Sec. 3301.941 1
Kent State University, administrative policy regarding web publishing Ohio Admin. Code 3342-9-02.3 1
1
Miami University, confidential information policy Ohio Admin. Code 3339-3-22 1
1
Ohio state institutions of higher education, confidentiality of religious accommodation requests Ohio Rev. Code Sec. 3345.026 1
1
Ohio University, data classification Ohio Admin. Code 3337-93-01 1
1
Ohio University, information technology accessibility Ohio Admin. Code 3337-4-01 1
1
Shawnee State University, accessibility of university web pages Ohio Admin. Code 3362-5-12(D)(4) 1
1
Stark State College, student records Ohio Admin. Code 3357:15-19-04 1
1
Student names and addresses withheld from multi-state assessment consortia Ohio Rev. Code Sec. 3301.948 1
1
Youngstown State University, confidentiality of disability services records Ohio Admin. Code 3356-7-02(F)(1) 1
1
Student User Privacy in Education Rights Act, school service providers RCW 28A.604.010 to 28A.604.060; chapter 277, Laws of 2015 10
Washington State University, student education records policy chapter 504-21 WAC 5
5
Bellingham Technical College, Family Educational Rights and Privacy Act chapter 495B-280 WAC 4
4
Cascadia College, student records and the Family Educational Rights and Privacy Act WAC 132Z-112-030 4
4
Highline College, student records and the Family Educational Rights and Privacy Act chapter 132I-280 WAC 4
4
Renton Technical College, Family Educational Rights and Privacy Act chapter 495E-280 WAC 4
4
The Evergreen State College, student education records chapter 174-280 WAC 4
4
Washington publisher duty to give institutions of higher education instructional materials in electronic format for students with print access disabilities RCW 28B.10.916; chapter 356, Laws of 2011 4
Western Washington University, student records chapter 516-26 WAC 4
4
Whatcom Community College, Family Educational Rights and Privacy Act chapter 132U-280 WAC 4
4
Eastern Washington University, student education records chapter 172-191 WAC 3
3
Skagit Valley College, student education records chapter 132D-125 WAC 3
3
Spokane Colleges, student records chapter 132Q-02 WAC 3
3
Tacoma Community College, confidentiality of student records chapter 132V-15 WAC 3
3
Wenatchee Valley College, confidentiality of student records WAC 132W-112-040 3
3
Bates Technical College, Family Educational Rights and Privacy Act chapter 495A-280 WAC 2
2
Big Bend Community College, implementation of the Family Educational Rights and Privacy Act chapter 132R-190 WAC 2
2
Campus-affiliated advocates: survivor communications and advocate records at institutions of higher education are confidential RCW 28B.112.030; chapter 72, Laws of 2017 2
2
Edmonds College, student records chapter 132Y-126 WAC 2
2
Everett Community College, disclosure of student information WAC 132E-122-130 2
2
Institutions of higher education may not use a social security number for identification and must give students personal identifiers RCW 28B.10.042; chapter 103, Laws of 2001 2
2
Institutions of higher education must reasonably accommodate students with disabilities, with core services that include textbooks in alternative media and adaptive equipment RCW 28B.10.910 to 28B.10.914; chapter 105, Laws of 1994 2
2
Parents' rights, written notice and opt-out for student surveys that reveal protected information RCW 28A.605.005(2)(h); chapter 369, Laws of 2025 2
2
Shoreline Community College, student records and library circulation records chapter 132G-140 WAC 2
2
University of Washington, rules governing student education records chapter 478-140 WAC 2
2
Washington fair chance to education act: institutions of higher education may not use an initial admissions application that asks about criminal history RCW 28B.160.010 to 28B.160.040; chapter 83, Laws of 2018 2
2
Yakima Valley College, disclosure of student records WAC 132P-33-100 2
2
Longitudinal student data system, confidentiality of student data RCW 28A.300.500; chapter 401, Laws of 2007 1
Postsecondary educational institutions: complainant and witness identity in sexual misconduct findings kept in an employee's personnel file RCW 28B.112.070(2); chapter 335, Laws of 2020 1
Skagit Valley College, students with disabilities policy chapter 132D-315 WAC 1
1
Universal online high school and beyond plan platform, accessibility options for students needing accommodations RCW 28A.230.215(4)(a)(x); chapter 271, Laws of 2023 1
1
Universal online high school and beyond plan platform, student privacy and third-party sharing RCW 28A.230.215(4)(a)(ii); chapter 271, Laws of 2023 1
1
AB 1159 (2026), student personal information (KOPIPA, ELPIPA and the Higher Education Student Information Protection Act) AB 1159 (Ch. 182, Stats. 2026), Cal. Bus. and Prof. Code Sections 22584 to 22587.2 10
K-12 Pupil Online Personal Information Protection Act (KOPIPA) Cal. Bus. and Prof. Code sections 22584 and 22585 6
Community college student records: confidentiality, student access, directory information and limits on disclosure Cal. Education Code sections 76200 to 76246 5
5
Early Learning Personal Information Protection Act (ELPIPA) Cal. Bus. and Prof. Code sections 22586 and 22587 5
School safety programs: no biometric information or required real-time location tracking, and developer privacy and disclosure duties Cal. Education Code section 32280.5 2
5
Basic instructional materials: legible print, closed captioning, and Section 508 accessibility of internet resources and digital multimedia programs Cal. Education Code section 60061.8 1
4
Campus records: use of legal name and gender from a government ID only where legally required, and a system for affirmed names and gender Cal. Education Code sections 66271.4 and 66271.41 4
4
Workforce Pell Grant eligibility: only program-level or deidentified student data to the Student Aid Commission Cal. Education Code sections 69872 and 69875 4
Campus crime records: victim identity withheld from released crime records and from reports disclosed to law enforcement Cal. Education Code section 67380 3
Postsecondary social media privacy: institutions may not require students to disclose social media credentials or information Cal. Education Code sections 99120 to 99122 3
Publishers and manufacturers of instructional materials: electronic versions of state-adopted literary titles for accessible media Cal. Education Code section 60061(a)(7) 3
3
Publishers of audiovisual instructional material for University of California, California State University and community college students: captioned formats on request Cal. Education Code section 67302.5 3
Publishers of instructional materials for University of California, California State University and community college students: electronic versions for students with disabilities Cal. Education Code section 67302 3
3
Pupil records: school programs that gather pupils' social media information Cal. Education Code section 49073.6 3
3
Sexual orientation, gender identity and gender expression data: demographic forms of the University of California, the California State University and community college districts Cal. Education Code section 66027 3
3
Student Test Taker Privacy Protection Act: proctoring services may collect only the personal information strictly necessary Cal. Business and Professions Code section 22588 3
Victim reports of violent crime, sexual assault and hate crime: forwarded to law enforcement without identifying the victim (Cal Grant condition) Cal. Education Code section 67383 3
GI Bill students: personal information sent to the Department of Veterans Affairs only with the student’s informed, written consent Cal. Education Code section 66014.4 2
2
Immigration-related protections in higher education: limits on disclosing student, faculty and staff personal information, and campus notice duties Cal. Education Code section 66093.3 2
Printed instructional materials submitted for adoption: equivalent digital format conforming to Section 508 and the Web Content Accessibility Guidelines Cal. Education Code section 60063 2
2
Pupil records: a person or organization given access to pupil records may not pass the information on without parental consent Cal. Education Code section 49076(a)(3) 2
2
Standardized postsecondary admission tests: a test agency may not release an identifiable test score without the test subject's authorization Cal. Education Code section 99161 2
AB 302 (2026), addictive feeds in school communications and extracurricular participation Cal. Educ. Code §§ 49058, 51103 1
1
California Community Colleges distance education: course design and all course materials must be accessible to every student Cal. Code Regs., tit. 5, sections 55200 and 55206 1
1
Campus LGBTQ point of contact: no disclosure of confidential information about alleged harassment, violence or discrimination without written consent Cal. Education Code section 66271.2 1
1
Generative AI Procurement Standards and Training in Public Postsecondary Education (AB 2392) Cal. Educ. Code Sections 66098 to 66098.3 (AB 2392, Ch. 855, Stats. 2026) 1
1
Nonresident tuition exemption: confidentiality of student information, including the immigration-status affidavit Cal. Education Code section 68130.5 1
1
Postsecondary admissions: no inquiry about a prospective student’s criminal history before the admission decision Cal. Education Code section 66024.5 1
Pupil records: school districts, county offices of education and charter schools may not collect pupil social security numbers Cal. Education Code section 49076.7 1
1
Student Online Personal Protection Act: operator prohibitions and duties 105 ILCS 85/5, 85/10 and 85/15 2
7
Illinois Community College Board rules: use, confidentiality and sharing of ICCB student-level data 23 Ill. Adm. Code 1501.116(a) and (b) and 1501.117 4
Student Online Personal Protection Act: parent and student rights over covered information 105 ILCS 85/33 2
4
Student Online Personal Protection Act: public school duties to post agreements and data inventories, secure covered information and relay deletion requests 105 ILCS 85/27 4
4
Board of Higher Education rules for private business and vocational schools: personal information held by a closing school 23 Ill. Adm. Code 1095.270(c)(6) to (8) 3
Illinois School Student Records Act: limits on releasing school student records and the remedies for violations 105 ILCS 10/6 and 10/9 2
3
Public Higher Education Act: limits on public institutions disclosing students' and employees' immigration status 110 ILCS 167/18(a), (b) and (j) 3
3
Public University Direct Admission Program Act: consent before community colleges share transfer students' information, and limits on redisclosure 110 ILCS 117/15(f) and (l) 2
3
Right to Privacy in the School Setting Act: student social networking account passwords 105 ILCS 75/5, 75/10 and 75/15 3
Student Optional Disclosure of Private Mental Health Act: student authorization of disclosure to a designated person 110 ILCS 74/5, 74/10 and 74/15 3
Chicago State University Law: Chicago State University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 660/5-125 1
2
Eastern Illinois University Law: Eastern Illinois University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 665/10-125 1
2
Governors State University Law: Governors State University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 670/15-125 1
2
Illinois State University Law: Illinois State University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 675/20-130 1
2
Northeastern Illinois University Law: Northeastern Illinois University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 680/25-125 1
2
Northern Illinois University Law: Northern Illinois University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 685/30-135 1
2
Public Community College Act: a community college may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 805/3-60 1
2
Public Community College Act: remediation data sharing agreement between a community college district and a school district 110 ILCS 805/3-80 2
2
School Code: publisher duty to furnish accessible electronic files of textbooks to the National Instructional Materials Access Center 105 ILCS 5/28-21 2
2
School Code: student biometric information policies of school districts 105 ILCS 5/10-20.40 and 5/34-18.34 2
2
Southern Illinois University Management Act: Southern Illinois University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 520/16 1
2
Student Online Personal Protection Act: breach notice from an operator to the school and from the school to parents 105 ILCS 85/15(5) and 85/27(a)(5) and (d) 1
2
Student Online Personal Protection Act: State Board of Education duties and the annual notice schools give parents 105 ILCS 85/28 2
2
University of Illinois Act: the University of Illinois may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 305/30 1
2
Western Illinois University Law: Western Illinois University may not give students' information to card issuers or print social security numbers on access cards 110 ILCS 690/35-130 1
2
Board of Higher Education Act: the Board may release student personally identifiable information only under a data sharing agreement 110 ILCS 205/1 and 205/9.36(b) 1
1
Credit Card Marketing Act of 2009: institutions of higher education may not give undergraduates' personal information to card marketers 110 ILCS 26/5, 26/25 and 26/30 1
P-20 Longitudinal Education Data System Act: data sharing arrangements and security measures 105 ILCS 13/25 and 13/30 1
1
Public Community College Act: Community College Board may release student personally identifiable information only under a data sharing agreement 110 ILCS 805/1-2(b) and 805/2-11.2(b) 1
1
School Code: WCAG 2.1 Level AA for third party online curriculum a school district makes available 105 ILCS 5/10-20.75 and 5/34-18.72 1
1
Student Online Personal Protection Act: school prohibitions on selling and sharing covered information 105 ILCS 85/26 1
Oregon Student Information Protection Act: duties of operators of kindergarten through grade 12 online services ORS 336.184 7
Oregon student education records: educational agency or institution policy and annual notification OAR 581-021-0250, 581-021-0260 5
Oregon student education records: inspection, copy fees, amendment and hearing OAR 581-021-0270, 581-021-0280, 581-021-0300 to 581-021-0320 5
Oregon student education records: notice and conditions for disclosure to other schools, for program audits and of directory information OAR 581-021-0360, 581-021-0370, 581-021-0390 5
Oregon student education records: prior consent, exceptions and redisclosure limits OAR 581-021-0330, 581-021-0340, 581-021-0350 5
Oregon bar on compelled access to students' personal social media accounts ORS 350.272, 350.274 4
Oregon publisher duty to give post-secondary institutions instructional material in electronic format for students with print disabilities ORS 337.511 to 337.524, instructional materials in alternative formats 4
Oregon student education records transfer, annual notice and amendment ORS 326.575 4
Oregon accessibility conformance report for digital instructional materials offered for state adoption OAR 581-011-0087(6), digital, electronic, or web-based materials and media 3
3
Oregon bar on requiring a prospective student to disclose a criminal conviction before an admission decision ORS 350.200 3
Oregon confidentiality of student information held by a certified advocate at an institution of higher education ORS 350.340 3
Oregon private career schools: student personally identifiable information safeguards and disclosure limits OAR 715-045-0018(2), (3) 3
Oregon public university sexual orientation and gender identity questions on demographic forms and use of a student's preferred first name ORS 352.274, 352.281 3
3
Oregon standardized student data method and standards for student education records ORS 326.561, 326.565 3
3
Oregon student education records: record of requests and disclosures OAR 581-021-0400 3
Oregon limits on personal information in sexual misconduct climate surveys and in waiver requests at institutions of higher education ORS 350.338, 350.344 2
Oregon public university and community college collection of sexual orientation, gender identity and student-parent data OAR 715-015-0005, 715-015-0011 2
2
Oregon student education records: school district confidentiality of personally identifiable information OAR 581-021-0265 2
2
Oregon NIMAS contract term for publishers of print instructional materials bought by the Department of Education OAR 581-011-0052, accessible instructional materials required 1
1
Texas parental consent before a school district employee or contractor records a child, collects a child's biometric identifiers or conducts a psychological examination (section 26.009 as amended in 2025) Tex. Educ. Code sec. 26.009 6
6
Texas student information: duties of operators of websites and applications used for a school purpose Tex. Educ. Code secs. 32.151 to 32.157 1
6
Texas Higher Education Coordinating Board rules on electronic copies of instructional material for blind and visually impaired students and students with dyslexia at public institutions of higher education 19 Tex. Admin. Code secs. 4.201 to 4.206 1
4
5
Texas video surveillance of special education classrooms and settings: placement, retention and confidentiality of the recordings Tex. Educ. Code sec. 29.022 5
5
Texas Department of Information Resources accessibility standards for institutions of higher education (subchapter C of chapter 213, as amended effective June 16, 2026) 1 Tex. Admin. Code secs. 213.31, 213.33, 213.37 and 213.39 to 213.42 4
4
Texas Department of Information Resources rule on the accessibility of institution of higher education websites 1 Tex. Admin. Code sec. 206.70 4
4
Texas publisher accessibility conditions for state adoption of instructional materials 19 Tex. Admin. Code secs. 66.28 and 66.66 4
4
Texas publisher or manufacturer duty to give an institution of higher education an electronic copy of instructional material for blind and visually impaired students and students with dyslexia Tex. Educ. Code sec. 51.970 4
Texas Department of Information Resources technical accessibility standards for institutions of higher education: applications and operating systems, functional performance criteria and support documentation 1 Tex. Admin. Code secs. 213.30, 213.35 and 213.36 3
3
Texas Higher Education Coordinating Board sharing of student contact information with institutions of higher education and confidentiality of applicant and student information Tex. Educ. Code sec. 61.0511(g) and (l) 3
3
Texas student information: operator use of the Texas Student Data System unique identifier and the state-required student data sharing agreement Tex. Educ. Code sec. 32.155(b) to (f) 1
3
Texas Higher Education Coordinating Board rules on the right to correction of incorrect information 19 Tex. Admin. Code secs. 1.96 to 1.99 2
2
Texas publisher duty to give the agency computerized files of adopted instructional material for Braille and other versions for students with disabilities Tex. Educ. Code sec. 31.028(b) 2
2
Texas career school and college student information: solicitation, disclosure and use offense Tex. Educ. Code sec. 132.024 1
Texas Department of Information Resources rules on the accessibility of state agency and institution of higher education websites 1 Tex. Admin. Code secs. 206.50 and 206.70 1
Texas school district cybersecurity policy, report of a breach of student information to the agency, and notice to the parent Tex. Educ. Code sec. 11.175 1
1
HB 55 (2026), Privacy Compliance for Education Technology Vendors Utah Code 53E-9-309, as amended by Laws of Utah 2026, ch. 18 (HB 55) 7
7
Instructional Materials for Students with a Disability: duty of a publisher or manufacturer to provide instructional materials in an electronic format to an institution of higher education Utah Code 53H-7-801 to 53H-7-803 5
Disclosure of educational data: a student's right to access it, informed consent before an institution discloses it, and limits on a third party that receives it Utah Code 53H-7-1001 and 53H-7-1002 3
1
4
Higher Education Student Data Protection: use limits, return or deletion, and sale and targeted advertising bans for a third-party contractor of an institution or the Utah Board of Higher Education Utah Code 53H-14-505 and 53H-14-506 4
4
Instructional Materials for Disabled Students Act: duty of a publisher or manufacturer to provide instructional materials in an electronic format to a state institution of higher education for students with disabilities Utah Code 53B-23-103 4
4
Rule R277-487: information security program and protection duties of a third-party contractor that holds student personally identifiable information Utah Admin. Code R277-487-7 4
4
Grades 7 through 12 student data sharing with higher education: local education agency data provision, state board implementation, and parent notice and opt-out Utah Code Title 53E, Chapter 9, Part 4 3
3
Student Data Protection: student access to educational data, informed consent to its disclosure to third parties, and a private right of action against a noncompliant third party Utah Code 53E-9-311 2
3
Confidential Communications for Institutional Advocacy Services: no disclosure of a victim's confidential communication to a certified advocate or qualified institutional victim services provider Utah Code 53H-14-401 and 53H-14-402 2
Higher Education Student Data Protection: Board and institution governance, student data protection policies, data governance plan and training record Utah Code 53H-14-502 and 53H-14-503 2
2
Model artificial intelligence use policy: local education agency policy, training, review and certification, and the state board's default policy Utah Code 53G-7-1402 2
2
Rule R277-469: NIMAS file requirements in publisher contracts for instructional materials and in the evaluation and substitution of materials sold to Utah schools Utah Admin. Code R277-469-3(4) and (5), R277-469-6(2), R277-469-7(2) and R277-469-10(6)(d) 2
2
Student Privacy: parental right to student information, with no school policy or action shielding an education record from a parent and no change to a student's education record on gender identity without written parental consent Utah Code 53E-9-205 2
Campus sexual violence reports: an institution keeps a victim's covered allegation confidential from law enforcement and discloses the minimum when it engages Utah Code 53H-7-503 1
1
Higher Education Student Data Protection: notice to students of a significant data breach at an institution Utah Code 53H-14-504 1
1
Student Data Protection: no sharing of personally identifiable student data without written consent, with the authorized exceptions and the student data manager's role Utah Code 53E-9-308 1
Student Data Protection: protection duty on education entities and third-party contractors, with state board rulemaking and the state student data officer Utah Code 53E-9-302 and 53E-9-307 1
Student Privacy: duty of education entities, their employees, and their third party contractors and other agents to protect student and family privacy, and local board privacy policies Utah Code 53E-9-202 1
1
Student Privacy: prior written parental consent for psychological examinations and sensitive surveys of students, the notice that makes consent valid, and limits on every user of the survey data Utah Code 53E-9-203 1
Utah Board of Higher Education rule on significant data breaches: risk assessment, exceptions, and written notice to each affected student Utah Admin. Code R765-1010 1
1
Utah High-Demand Talent Portal: the portal must be accessible to users with disabilities in compliance with the Americans with Disabilities Act Utah Code Title 53H, Chapter 13, Part 4 1
1
Student Data Transparency and Security Act: school service contract providers C.R.S. sections 22-16-101 to 22-16-112 (HB 16-1423, 2016 Colo. Sess. Laws ch. 355) 9
9
Facial recognition services in Colorado schools: contracting prohibition, exceptions, consent, notice and retention limits C.R.S. sections 22-32-150 and 22-30.5-529 (SB 25-143, 2025 Colo. Sess. Laws ch. 86) 2
3
5
Student Data Transparency and Security Act: local education provider contracts, postings and student privacy policy C.R.S. section 22-16-107 (HB 16-1423, 2016 Colo. Sess. Laws ch. 355) 5
5
Colorado postsecondary institutions: protect a student's social security number and do not use it as the primary student identifier C.R.S. section 23-5-127 4
Colorado school district duties on student education records and student surveys C.R.S. section 22-1-123 4
4
Colorado state institutions of higher education: limits on asking applicants about criminal and disciplinary history C.R.S. section 23-5-106.5 (as added by SB 19-170) 4
4
Student Data Transparency and Security Act: State Board of Education and Department of Education duties C.R.S. sections 22-16-104 to 22-16-106 (HB 16-1423, 2016 Colo. Sess. Laws ch. 355) 4
4
Colorado public school contracts: contractor compliance with the state technology accessibility standards and indemnity C.R.S. section 22-1-135(2)(d) and (2)(e), as amended by HB 25-1152 3
3
Colorado department of higher education: no financial information in the web-based financial aid completion tool shared with schools C.R.S. section 23-3.3-106(4) 2
2
Colorado schools, public colleges and other public-facing institutions: limits on collecting immigration and citizenship information and policies for federal immigration enforcement requests C.R.S. sections 24-74.1-101 to 24-74.1-103 (as added by SB 25-276) 2
Public school contract terms: student data protection clauses deemed included and waiver terms void C.R.S. section 22-1-135 (HB 22-1252, as amended by HB 24-1450) 2
2
Student Data Transparency and Security Act: parent rights to inspect, copy and correct student data, and the complaint policy C.R.S. section 22-16-112 (HB 16-1423, 2016 Colo. Sess. Laws ch. 355) 2
2
Colorado commission and department of higher education: sharing student data and student unit records with the department of education under FERPA C.R.S. sections 23-1-109.3, 23-1-119.3 1
1
Colorado department of higher education: student privacy in the statewide student success data system and its contractors C.R.S. section 23-1-141(2)(e) 1
1
Colorado Rules Establishing Technology Accessibility Standards (Office of Information Technology) 8 CCR 1501-11 1
Colorado state institution of higher education police departments: sharing campus incident information and redacting a sexual assault victim's identity C.R.S. section 23-5-141 (as added by HB 11-1169) 1
Regulations of the Commissioner of Education Part 121, breach complaints and breach reports and notices by an educational agency 8 NYCRR §§ 121.4 and 121.10(b), (d) and (e) 8
8
Regulations of the Commissioner of Education Part 121, duties of a third-party contractor that receives student data or teacher or principal data 8 NYCRR §§ 121.1(d), 121.6 and 121.9 8
8
Education Law section 2-d, duties of an educational agency: parents bill of rights, contract terms, data security and privacy policy and notice to parents N.Y. Educ. Law § 2-d(3), (5)(c) to (e) and (6)(b) 5
6
Education Law section 2-d, duties of a third party contractor that receives student data or teacher or principal data N.Y. Educ. Law § 2-d(4)(f) and (5)(f) 5
5
Publishers of commercially published college instructional materials: electronic versions for students with disabilities N.Y. Educ. Law section 715 4
Regulations of the Commissioner of Education Part 121, duties of an educational agency: data minimization, bill of rights supplement, data security and privacy policy, training and Data Protection Officer 8 NYCRR §§ 121.2(b), 121.3(d), 121.5, 121.7 and 121.8 3
4
Regulations of the Commissioner of Education Part 121, breach notice by a third-party contractor 8 NYCRR § 121.10(a), (c) and (f) 3
3
Education Law section 2-d, breach notice by a third party contractor to the educational agency N.Y. Educ. Law § 2-d(6)(a), (c) and (d) 2
2
Use of biometric identifying technology in schools N.Y. State Tech. Law § 106-b 2
Applications for admission to an educational institution: no question requiring involuntary disclosure of the parents' marital status N.Y. Educ. Law section 313-a 1
Instructional materials in usable alternative formats: written policy and plan required of school district boards (Part 200) 8 NYCRR 200.2(b)(9), under Educ. Law §§ 1604(29-a), 1709(4-a), 2503(7-a) and 2554(7-a) 1
1
Regulations of the Commissioner of Education Part 121, powers of the Chief Privacy Officer over an educational agency 8 NYCRR § 121.13 1
1
Unfair educational practices: no postsecondary educational institution may require an individual to provide a copy of his or her criminal history record N.Y. Educ. Law section 313(3)(f) 1
Use of student social security numbers restricted N.Y. Educ. Law section 2-b 1
Student Data Vendor Security Act: duties of a school service contract provider Student Data Vendor Security Act (Act 754 of 2023), school service contract provider duties 10
10
Arkansas RISE Act: accommodations and disability resource information at institutions of higher education Arkansas RISE Act (Act 907 of 2025) 9
Student Online Personal Information Protection Act Ark. Code Ann. sec. 6-18-109 (Act 1196 of 2015) 6
Electronic versions of printed and nonprinted instructional materials that publishers provide to institutions of higher education for students with disabilities Ark. Code Ann. secs. 6-68-101 to 6-68-104 and 6-68-108 (Act 758 of 2001) 4
Institution guidelines and request centers for electronic instructional materials for students with disabilities Ark. Code Ann. secs. 6-68-105 and 6-68-107 (Act 758 of 2001) 3
Social media accounts of current and prospective students and employees of institutions of higher education Ark. Code Ann. sec. 6-60-104 (Act 998 of 2013) 3
Arkansas Higher Education Information System: protection of student personally identifiable information Ark. Code Ann. sec. 6-60-902 (Act 1195 of 2011, as amended by Act 910 of 2019) 2
2
Social Security numbers on student and employee identification cards at institutions of higher education Ark. Code Ann. sec. 6-61-128 (Act 108 of 2003) 2
Confidentiality of student information in the postsecondary remediation reports Ark. Code Ann. sec. 6-61-221(c) 1
1
Electronic communications privacy policy of public postsecondary institutions Ark. Code Ann. sec. 6-61-126 (Act 1799 of 2003) 1
1
Student data privacy: duties of operators of PreK-12 school websites, services and applications Md. Code Ann., Educ. § 4-131 7
7
Criminal history questions on undergraduate admissions applications and campus residency decisions: Maryland Fair Access to Education Act Md. Code Ann., Educ. §§ 26-501 to 26-506 (Title 26, Subtitle 5) 5
Equivalent access to digital tools for students with disabilities: accessibility conformance report, remedy, penalty and indemnity duties of a vendor to a local school system (section 7-910 as rewritten in 2022) Md. Code Ann., Educ. § 7-910(c)(2), (c)(4) and (g) 4
4
Instructional materials for blind and print disabled students in higher education: publisher duty to supply an electronic format to the Maryland Library for the Blind and Print Disabled Md. Code Ann., Educ. §§ 11-901 to 11-906 (Title 11, Subtitle 9) 4
Personal electronic accounts of students and applicants: limits on institutions of postsecondary education Md. Code Ann., Educ. § 26-401 4
Student records of degree-granting institutions approved by the Maryland Higher Education Commission: physical security, confidentiality and electronic-record security COMAR Title 13B, Subtitle 02, Chapter 02, regulation .19E, and Chapter 01, regulation .18E 4
Equivalent access to digital tools for students with disabilities: procurement, evaluation, selection, WCAG and reporting duties of a local school system (section 7-910 as rewritten in 2022) Md. Code Ann., Educ. § 7-910(b) to (f), (h) and (i) 3
3
Breach of the security of a system at a public institution of higher education: investigation, notice to the individual, web notice and remedy policy Md. Code Ann., State Gov't §§ 10-13A-03(f) and 10-13A-04 2
2
Free or low-cost digital course materials at University System of Maryland institutions: equal accessibility for individuals with disabilities Md. Code Ann., Educ. § 12-114.2 2
2
Protection of personally identifiable information by public institutions of higher education: privacy governance program, individual requests, security program and privacy notice Md. Code Ann., State Gov't §§ 10-13A-01 to 10-13A-03(e) 2
2
SB 720 / Ch. 634 (2026), Artificial Intelligence Ready Schools Act: school-system policy, coordinator, tool evaluation and procurement Md. Code Ann., Educ. §§7-2201 to 7-2204 2
2
Purchase and use of accessible teaching and learning materials by local boards of education and public agencies, with WCAG 2.1 Level AA for digital learning resources (COMAR 13A.06.05) COMAR Title 13A, Subtitle 06, Chapter 05, regulations .04 to .06 1
1
Student Online Personal Information: operators of K-12 sites, services and applications RSA 189:68-a 5
Educational institution policies on social media: limits on access to a student's personal social media account RSA 189:70 4
Student data governance: data element index, annual breach report, software inventory and retained parental consent RSA 189:66 4
4
Higher education commission career school rules: student records kept in a safe and secure environment, with a unique identifier Hedc 304.04 3
Sexual misconduct at institutions of higher education: anonymous climate survey responses and anonymized data in survey submissions and annual reports RSA 188-H:5, V and VI; RSA 188-H:12 3
Student data disclosed to a testing entity: limits on the testing entity's disclosure, use and linking of the data, and destruction on a student's request after the SAT or ACT RSA 189:67, II(b), II-a and III 3
Higher education commission standards for degree-granting institutions: student record security and data privacy policies Hedc 405.06(d)-(e); Hedc 405.07 2
Pupil assessment information: testing entity duties to destroy student data and limits on its disclosure and use RSA 193-C:12 2
2
Sexual misconduct at institutions of higher education: confidential resource advisor communications and records disclosed only with consent RSA 188-H:7; RSA 188-H:8 2
Sexual misconduct at institutions of higher education: nondisclosure of the parties' identities and no personally-identifying questions in climate surveys RSA 188-H:2, I(g)(9); RSA 188-H:4 2
Student data governance: department minimum privacy and security standards, and local education agency plan duties for software review, data access, breach response and service providers RSA 189:66, V(b) to (e) 2
2
Local education agency request for special education funds: accessible instructional materials component Standards for the Education of Children with Disabilities, Ed 1126.01(b)(12) 1
1
Sexual misconduct at institutions of higher education: policy posted on the institution's website in an accessible format RSA 188-H:2, I 1
Student privacy: categories of student data the department of education may not collect or maintain in the statewide longitudinal data system RSA 189:68, I 1
1
Student privacy: school limits on radio frequency identification devices, remote surveillance software on school-supplied computers and classroom recording RSA 189:68, II to IV 1
1
Student online privacy protection: operators of K-12 school sites, services and applications N.C. Gen. Stat. 115C-401.2 6
North Carolina Longitudinal Data System: privacy, security, and use rules for student data N.C. Gen. Stat. 116E-4, 116E-5, 116E-6 3
State Board of Community Colleges Code, rule 400.2: disciplinary records, firearm-eligibility background checks and social security numbers in admission 1D SBCCC 400.2(d), (h), (i) 3
3
Student data system security: State Board of Education duties N.C. Gen. Stat. 115C-402.5(b) 3
3
Community college consent to disclose a student's driving eligibility status to the Division of Motor Vehicles N.C. Gen. Stat. 115D-10.70(c) 2
2
Constituent institutions of The University of North Carolina: information regarding immigration status N.C. Gen. Stat. 116-40.14(b) 2
2
Local boards of education, internet safety policy limiting students to age-appropriate material and barring social media access (G.S. 115C-102.12(1) and (5)) N.C. Gen. Stat. 115C-102.12, subdivisions (1) and (5) 2
2
Meningococcal vaccination information on student health forms at postsecondary institutions N.C. Gen. Stat. 116-260 2
Parental rights to opt in to protected information surveys of students N.C. Gen. Stat. 115C-76.65 2
2
Personally identifiable admissions information at The University of North Carolina and the community colleges N.C. Gen. Stat. 132-1.1(f) 2
2
Prohibition on a school contractor's sale of personally identifiable student information N.C. Gen. Stat. 115C-401.1 2
2
Department of Public Instruction evaluation framework for artificial intelligence tools (G.S. 115C-102.14, added by Session Law 2026-41, section 7.39) N.C. Gen. Stat. § 115C-102.14 (added by S.L. 2026-41, s. 7.39(l)) 1
1
Education records of minor students at community colleges N.C. Gen. Stat. 115D-10.80 1
1
Instructional materials contracts: license for local boards of education to produce braille, large print, audio, and other accessible copies N.C. Gen. Stat. 115C-98(a) 1
1
Internet safety policy for school-provided devices and internet services N.C. Gen. Stat. 115C-102.12 1
1
Military recruiter access to the student information directory at public universities and community colleges N.C. Gen. Stat. 116-33.1; 115D-20(8) 1
1
Private colleges and universities: liability for disclosure of student data and records to State agencies N.C. Gen. Stat. 116-229.1 1
Student data system: biometric information, political affiliation, religion and voting history not collected N.C. Gen. Stat. 115C-402.5(c) 1
1
Student data governance: duties of the Department of Education under the Student Data Accessibility, Transparency and Accountability Act W. Va. Code sec. 18-2-5h(c)(1) to (7) and (9) 8
8
Student data governance under Policy 4350: data duties of county boards and schools W. Va. Code St. R. sec. 126-94-4.3 4
4
West Virginia Board of Education Policy 2460, Educational Purpose and Acceptable Use of Electronic Resources, Technologies and the Internet (W. Va. Code St. R. 126CSR41) W. Va. Code St. R. § 126-41-1 et seq. 4
4
Higher education course materials and bookstores: the student-data terms an institution must disclose and the data terms a course-materials agreement must contain W. Va. Code sec. 18B-10-14(g) to (k) 3
3
Policy 2445.40, Instructional Resources: vendors' permission statements to the National Instructional Materials Accessibility Center and accessibility of non-print materials for pre-kindergarten through grade 12 W. Va. Code St. R. secs. 126-35-8.6 and 126-35-8.6.a 3
3
Blind Persons' Literacy Rights and Education Act: publishers of textbooks and instructional materials sold to the state or a local education agency, including post-secondary institutions, must furnish computer diskettes from which braille can be produced W. Va. Code sec. 18-10J-5 2
2
Marshall University directory information rule: limits on the use and disclosure of students' email addresses, home addresses, telephone numbers, dates and places of birth and parents' addresses Marshall University Board of Governors Rule No. SA-4, Directory Information, under W. Va. Code sec. 18B-1-6 2
2
Student data governance: categories of individual student data that districts may not report and schools may not collect W. Va. Code sec. 18-2-5h(d) and (e) 2
2
Student data governance: the data governance manager the state superintendent must appoint under the Student Data Accessibility, Transparency and Accountability Act W. Va. Code sec. 18-2-5h(f) 2
2
Student data governance: written consent the ACT or the College Board must obtain before using confidential student information from the state summative assessment W. Va. Code sec. 18-2-5h(c)(3)(H) 2
2
Student Social Security numbers: no display by schools, colleges or universities to identify students W. Va. Code sec. 18-2-5f 1
2
Student data governance: a parent's right to inspect a child's education record and the school district's duty to provide a copy W. Va. Code sec. 18-2-5h(g) 1
1
Student data governance: notice of a student data breach to the Governor and to parents W. Va. Code sec. 18-2-5h(c)(8) 1
1
Protecting Students Digital Privacy Act of 2016, operator obligations D.C. Code § 38-831.02 3
9
Educational data warehouse system: confidentiality of student and staff data, University of the District of Columbia participation and student identifiers D.C. Code § 38-2609 5
5
Protecting Students Digital Privacy Act of 2016, 1-to-1 programs D.C. Code § 38-831.03 1
4
5
Institution of Higher Education Sexual Misconduct Reporting and Resource Accessibility Act of 2025, confidential communications with a confidential resource advisor D.C. Code § 38-3502(d), (i) and (j) 4
Protecting Students Digital Privacy Act of 2016, student personal accounts and devices D.C. Code § 38-831.04 4
4
Institution of Higher Education Sexual Misconduct Reporting and Resource Accessibility Act of 2025, outcome report that identifies no one D.C. Code § 38-3508(a) 2
Postsecondary degree granting educational institutions: licensure standard on student records 5-A DCMR § 8004.15 2
Comprehensive Student Technology Equity Plan, privacy impact assessments of third-party learning applications D.C. Code § 38-831.21 1
1
Education research practice partnership: data terms of the memorandum of understanding for each research project District of Columbia Education Research Practice Partnership, D.C. Code § 38-785.05(b)(2) 1
Artificial intelligence platform conditions on school district grant funds (Digital Learning, section 1002.321(3)) Fla. Stat. § 1002.321(3) 4
4
Student Online Personal Information Protection Act: operators of K-12 sites, services and applications Fla. Stat. § 1006.1494 4
University of Central Florida regulation on protection and disclosure of sensitive information by employees and affiliates Univ. of Cent. Fla. Reg. UCF-3.045 4
4
University of Florida regulation on confidentiality of student records and applicant records Univ. of Fla. Reg. 4.007 3
3
Florida International University regulation on access to student education records Fla. Int'l Univ. Reg. FIU-108 2
2
Florida public postsecondary education records and applicant records: confidentiality and release only with the student's written consent Fla. Stat. § 1006.52 2
2
Florida public postsecondary education records: compliance with FERPA, copy fees and a student's action to enforce Fla. Stat. § 1002.225 2
2
Florida School Safety Portal: data governance, role-based access and auditing for the integrated school safety data repository Fla. Stat. § 1001.212(6) 2
2
Public school TikTok prohibition on district-owned devices and district Internet access Public school TikTok prohibition, § 1003.02(1)(g)5. 2
2
University of Central Florida regulation on access to students' limited access records Univ. of Cent. Fla. Reg. UCF-2.018 2
2
District school boards, prohibiting and preventing student access to social media platforms on school district Internet access (Fla. Stat. 1003.02(1)(g)4.) Fla. Stat. 1003.02(1)(g)4. 1
1
Florida instructional materials publisher permission to reproduce adopted materials in Braille, large print or other formats for students with disabilities Fla. Stat. § 1006.38(16) 1
1
Florida limits on what a school district may require from a home education family and keep in a district or state database Fla. Stat. § 1002.41(1)(b) 1
1
Florida Postsecondary Academic Library Network: compliance with accessibility and student data privacy law in the Student Open Access Resources Repository Fla. Stat. § 1006.73(4)(b) 1
1
Florida public school student identification numbers and the request for a student's social security number Fla. Stat. § 1008.386 1
1
Florida school district Internet safety policy that prevents student access to websites, applications or software that do not protect students' personal information Fla. Stat. § 1003.02(1)(g)3. 1
1
Student Records regulations of the Board of Education: privacy, security and third-party access to student records 603 CMR 23.00 9
9
Board of Higher Education privacy, confidentiality and data security regulation: personal data held by the Board and by public institutions of higher education 610 CMR 10.00 6
6
Sexual misconduct policies: confidentiality of reporting and responding parties, anonymous reports and confidential resource providers Mass. Gen. Laws ch. 6, § 168E 5
Fair educational practices: limits on application inquiries about race, religion, color, national origin and criminal history Mass. Gen. Laws ch. 151C, § 2(c) and (f) 3
Sexual misconduct climate survey: anonymous responses and no disclosure of identifying information Mass. Gen. Laws ch. 6, § 168D(f) 2
Sexual misconduct policies and security information on an institution's website: accessible format Mass. Gen. Laws ch. 6, § 168E(b) and (e) 2
Fair educational practices at vocational training institutions: limits on application inquiries about race, religion, creed, color, age, sex and national origin Mass. Gen. Laws ch. 151C, § 2A(d) 1
In-state tuition and state financial aid eligibility: protection of student and family information from disclosure Mass. Gen. Laws ch. 15A, § 9 1
Inclusive concurrent enrollment: student behavioral policies in accessible formats for participating students with severe intellectual or developmental disabilities Mass. Gen. Laws ch. 15A, § 30A(d) 1
1
Massachusetts General Laws chapter 71, section 93, policy regarding internet safety measures for public schools providing computer access to students Mass. Gen. Laws ch. 71, § 93 1
1
School service providers: limits on collecting, using, disclosing, selling and retaining pupil data NRS 388.281-388.292, 388.295, 388.296 1
9
Power-based violence at institutions of higher education: confidentiality of identities and personal information in surveys, reports and advocate services NRS 396.1425, 396.143, 396.144, 396.149, 396.155, 396.159 4
5
Statewide pupil information system: compliance with FERPA and IDEA confidentiality, parental consent to release education records, and the electronic access record NRS 385A.830 5
5
School service providers: pupil data security plan, successor entities and breach notice NRS 388.293 4
Student directory information: informed-consent form and bar on release or use of personally identifiable information without consent NRS 396.535 3
3
Access to electronic version of instructional materials for students with a print access disability, including the publisher's duty to supply it NRS 396.546 1
1
2
Private schools: posting of school service providers and pupil data security information NRS 394.1616 2
Student outcomes data dashboard: no personal identifying information of any student or other person NRS 396.5912 1
1
School service providers and school-issued devices: student personal information Va. Code Ann. § 22.1-289.01 7
7
Students at institutions of higher education: confidentiality of prior-school records and limits on disclosing directory information Va. Code Ann. § 23.1-405(B), (C) 4
Contracts with publishers: the NIMAS electronic files a publisher of Board-approved textbooks and other high-quality instructional materials must furnish for students with print disabilities Va. Code Ann. § 22.1-241(B) 3
3
Reports of sexual violence at institutions of higher education: personally identifiable information and the review committee Va. Code Ann. § 23.1-806(C), (F), (G) 3
Accepted applicants: transmission of identifying information to the State Police for comparison with the Sex Offender Registry Va. Code Ann. § 23.1-407 2
Admissions applications at public institutions of higher education: criminal history Va. Code Ann. § 23.1-407.1 2
2
Students issued student visas: reporting a failure to enroll, a withdrawal or a visa violation to the Attorney General Va. Code Ann. § 23.1-406 2
Unique student identification numbers: no requirement to provide a student's federal social security number Va. Code Ann. § 22.1-287.03 2
2
Artificial intelligence system use and safety in instructional settings: Department guidance, school board policies and the AIS Innovation in Education Pilot Program Va. Code Ann. § 22.1-20.2:1 (2026 Acts, chs. 937 and 943) 1
1
Hazing violation reports at institutions of higher education: no personally identifiable information of students Va. Code Ann. § 23.1-822(A), (B) 1
Medical schools: reporting fourth-year medical students to the Eligible Health Care Provider Reserve Directory with their consent Va. Code Ann. § 23.1-110 1
Public institutions of higher education: information on the disability accommodation process in accessible formats and on the institution's website Va. Code Ann. § 23.1-401.3(C) 1
1
Student-athletes: an institution's disclosure of biometric data Va. Code Ann. § 23.1-408.2(B) 1
Students at institutions of higher education: no sale of personal information by a public institution and no demand for social media credentials Va. Code Ann. § 23.1-405(D), (E) 1
Student data privacy: operators of school services and contractors of boards of education Conn. Gen. Stat. §§ 10-234aa to 10-234dd 3
7
Connecticut State Colleges and Universities Digital Accessibility Policy (Board of Regents Policy 5.14): web content and mobile applications to WCAG 2.1 Level AA CSCU Policy 5.14 (Digital Accessibility), sections A-D, F-H 4
4
Public school information system: confidentiality of individual student and staff data and district participation Conn. Gen. Stat. § 10-10a 3
4
Boards of education: contracts with student data contractors and public notice of each contract Conn. Gen. Stat. § 10-234bb(a), (f), (g) and (i) 2
2
Boards of education: notice to students and parents of a student data breach a contractor reports Conn. Gen. Stat. § 10-234dd(a)(3) 2
2
Connecticut State Colleges and Universities Accessibility Policy for Electronic Information and Technology (Board of Regents Policy 5.12): WCAG 2.1 Level AA, captioning and accessible procurement CSCU Policy 5.12 (Accessibility Policy for Electronic Information and Technology) 2
2
Connecticut State Colleges and Universities Digital Accessibility Policy (Board of Regents Policy 5.14), procurement: WCAG 2.1 Level AA requirements and vendor accessibility documentation CSCU Policy 5.14 (Digital Accessibility), section E 2
2
Institutions of higher education: no disclosure of the identity of a party to a sexual assault, stalking or intimate partner violence investigation, and anonymous reporting Conn. Gen. Stat. § 10a-55m(b)(6)(E), (d) 2
Preschool through Twenty and Workforce Information Network: constituent units' FERPA-compliant data submission and reports without personally identifiable information Conn. Gen. Stat. § 10a-57g(g) 2
2
Higher education and school boards: admission and aid application information not a public record, and limits on disclosing confidential applicant information to federal immigration authorities Conn. Gen. Stat. § 10a-11i 1
Institutions of higher education: confidentiality statement for sexual misconduct climate assessment respondents Conn. Gen. Stat. § 10a-55s(b) 1
Postsecondary institution online reporting system for sexual harassment and sexual violence: limits on access to the data it collects 24 P.S. § 20-2003-J (Act 16 of 2019) 7
Senate Bill 378, Student Data Privacy and Protection Act, limits on a third party's use of student data, biometric identifiers and targeted marketing Pa. S.B. 378, secs. 524, 525, 527 (PN 1528) 4
6
Postsecondary student records: institutions must adopt a records plan, define confidentiality standards and grant students access 22 Pa. Code § 31.33 4
Senate Bill 378, Student Data Privacy and Protection Act, data breach notice for student data Pa. S.B. 378, secs. 541, 543 (PN 1528) 3
Community college student records: confidentiality standards and student access to files 22 Pa. Code § 35.27 2
2
Senate Bill 378, Student Data Privacy and Protection Act, inspection, correction and expungement of educational records Pa. S.B. 378, sec. 526 (PN 1528) 2
Department of Education data sharing with the Performance-based Funding Council and the State Board of Higher Education: confidentiality terms for student data 24 P.S. § 20-2033-L(e) (Act 47 of 2025) 1
1
House Bill 2785, required student data terms in a school entity's contract with a provider of artificial intelligence-related technology Pa. H.B. 2785, sec. 807.2 (PN 4005) 1
1
Pennsylvania charter school regulations: requirement that textbook publishers deliver NIMAS files to the National Instructional Materials Access Center for charter schools 22 Pa. Code 711.45(g) 1
1
Pennsylvania special education regulations: requirement that textbook publishers deliver NIMAS files to the National Instructional Materials Access Center for agencies 22 Pa. Code 14.106(g) 1
1
Education Privacy Act: higher education institutions and students' social networking accounts and personal devices Del. Code Ann. tit. 14, §§ 8101 to 8105 6
Student Data Privacy Protection Act: operators of K-12 school services Del. Code Ann. tit. 14, §§ 8101A to 8106A 6
Ban the Box Act: postsecondary admissions and an applicant's criminal history Del. Code Ann. tit. 14, §§ 9002C, 9003C 4
Disclosure of pupils' school records: confidentiality of student education records in public and private schools Del. Code Ann. tit. 14, § 4111 4
Braille literacy rights and education: textbook publishers and the Division for the Visually Impaired Del. Code Ann. tit. 14, § 206(c) 2
2
Delaware public school video cameras: school board rules for classroom use, classroom consent and the places where cameras may not be used Del. Code Ann. tit. 14, § 4121 2
2
Sexual Assault Policy for Institutions of Higher Education: victim confidentiality and personally identifiable information in reports Del. Code Ann. tit. 14, §§ 9002A, 9006A 2
Right of the State to transcribe and reproduce instructional material in braille and other media: instructional materials contracts Del. Code Ann. tit. 14, § 4114 1
1
Student information: privacy, contractor duties and prohibitions on commercial use La. R.S. 17:3914 2
5
Student information: required sharing with named recipients and its confidentiality limits La. R.S. 17:3914(L), (M), (N) and (O) 1
3
Act 496 (SB 346), deepfake material used against K-12 students La. R.S. 17:416.14.1 2
Campus Accountability and Safety Act: online system for anonymous disclosures and confidential reports of power-based violence at a public postsecondary institution La. R.S. 17:3399.15(B)(3) 2
2
Instructional materials: braille production files from publishers of adopted textbooks La. R.S. 17:1985 2
2
Personal Online Account Privacy Protection Act: educational institutions may not require a student's or prospective student's account credentials La. R.S. 51:1952, 1954 and 1955 2
Public postsecondary admissions: limits on asking a prospective student about criminal history La. R.S. 17:3152 2
2
Textbook and instructional materials review and adoption: accessible electronic format requirement La. R.S. 17:351.1(B)(3)(e) 2
2
Affordable textbooks and open educational resources: highlighted course materials at a public postsecondary institution must comply with the Americans with Disabilities Act La. R.S. 17:3129.9(B)(1) 1
1
Campus Accountability and Safety Act: anonymous, voluntary power-based violence climate survey at a public postsecondary institution La. R.S. 17:3399.17(A) 1
1
Student information: consent-based collection and disclosure of grade 8 to 12 student data for postsecondary admission and aid La. R.S. 17:3914(K) 1
1
Student information: limits on what a local public school system may require, disclose and let others access La. R.S. 17:3914(C) and (D) 1
Student information: no re-identification of de-identified data and no predictive-modeling limits on students' opportunities La. R.S. 17:3914(E) 1
Student technology fee: use of proceeds must comply with the Americans with Disabilities Act La. R.S. 17:3351.1(B)(1) 1
1
Transfer of personally identifiable student information: public posting of each recipient, agreement and data elements La. R.S. 17:3913 1
1
Campus sexual misconduct reports: private data, role-based access and data audit trail Minn. Stat. § 135A.15, subdivisions 5 and 7 7
Educational data: technology providers and school-issued devices Minn. Stat. § 13.32, subdivisions 13 to 15 5
6
Postsecondary admission: limits on inquiring into an applicant's criminal record Minn. Stat. § 135A.062 4
Students with disabilities: accommodation policy and accessible formats at institutions of higher education Minn. Stat. § 135A.163 4
Minnesota Statutes section 125B.15, internet access for students: filtering of obscene material, child pornography and material harmful to minors on school computers Minn. Stat. § 125B.15 2
2
Postsecondary residential housing lists for election day registration: student addresses and the Safe at Home exclusion Minn. Stat. § 135A.17, subdivision 2 2
Sale of student information to card issuers and credit card marketing at postsecondary institutions Minn. Stat. § 135A.145 2
Online education services and student educational records: operator duties for student covered information Online education services and student educational records, N.J. Stat. §§ 56:8-215 to 56:8-221 6
Institutions of higher education may not require access to a student's or applicant's personal accounts Personal accounts of students and applicants, N.J.S.A. 18A:3-29 to 18A:3-32 (P.L.2012, c.75) 4
School-issued electronic devices: notice that the device may record or collect information on the student Notification on school-issued electronic devices, N.J.S.A. 18A:36-39 (P.L.2013, c.44) 3
3
Statewide Longitudinal Data System for Education and Workforce Development: NIST standards, secure environment with aggregate-only release, and privacy standards Statewide Longitudinal Data System, N.J.S.A. 18A:4-2.1 (P.L.2025, c.388, section 1) 2
3
Outside organizations that receive student record information may not pass it to a third party without written consent Student records access, N.J.A.C. 6A:32-7.5(a) and (e)(14) 1
2
School district duties to secure student records and keep student information off the district website Student records, N.J.A.C. 6A:32-7.1 and 6A:32-7.4 2
2
School surveillance equipment: board of education memorandum of understanding with local law enforcement for live streaming video Access to school surveillance equipment by law enforcement authorities, N.J.S.A. 18A:41-9 (P.L.2017, c.119) 2
2
Accessibility of school district, charter school and renaissance school websites and web services School website compliance, N.J.S.A. 18A:36-35.1 (P.L. 2021, c. 461) 1
1
Institutions that receive direct State support or take part in State student aid must participate in the Secretary of Higher Education's Student Unit Record Enrollment (SURE) data system Licensure rules, N.J.A.C. 9A:1-1.3(g) 1
Public and independent institutions of higher education may not display a student's Social Security number on grade postings, rosters, identification cards or directories Display of students' social security numbers, N.J.S.A. 18A:3-28 (P.L.2005, c.28) 1
School district and charter school websites may not disclose personally identifiable student information without parental consent Student information on school websites, N.J.S.A. 18A:36-35 (P.L.2001, c.402) 1
1
Student information obtained in granting out-of-State tuition exemptions at public institutions of higher education is confidential Certain students to qualify for in-State tuition at public institutions of higher education confidentiality of student information, N.J.S.A. 18A:62-4.4(b) (P.L.2013, c.170)1
1
Wisconsin publisher duty to provide postsecondary instructional material in alternative or electronic format for students with disabilities Wis. Stat. sec. 106.57 7
Wisconsin limits on an institution's handling of alternative-format instructional material and terms of its conversion contracts Wis. Stat. sec. 106.57(4) 3
University of Wisconsin System policy on the accessibility of web content and mobile applications UW System Administrative Policy SYS 655 2
2
Wisconsin bar on student identification numbers that incorporate the social security number Wis. Stat. secs. 118.169(1), 36.32 and 38.14(14) 2
Wisconsin confidential record of dormitory students' meningococcal and hepatitis B vaccination affirmations Wis. Stat. sec. 36.25(46)(a)5. 2
2
Wisconsin confidential record of private college students' meningococcal and hepatitis B vaccination affirmations Wis. Stat. sec. 252.09 2
Wisconsin restrictions on educational institution access to students' personal Internet accounts Wis. Stat. sec. 995.55(3) 2
University of Wisconsin System policy requirement that third-party web content and mobile apps be accessible UW System Administrative Policy SYS 655, third-party web content and mobile apps 1
1
Wisconsin bar on identifying students in the University of Wisconsin System's remedial course report Wis. Stat. sec. 36.65(5)(b)2. 1
1
Wisconsin statewide student data system and student data sharing agreements Wis. Stat. sec. 115.297 1
Wisconsin student information system pupil identification numbers Wis. Stat. sec. 115.383(5) 1
1
Wisconsin technical college limit on the use of student information reported for high school students taking technical college courses Wis. Admin. Code sec. TCS 9.03(3) 1
1
Wisconsin University of Wisconsin System confidentiality of students' religious accommodation requests Wis. Admin. Code sec. UWS 22.03(4) 1
1
Early Intervention Program rules (Part C): confidentiality, access, consent, amendment, safeguards and destruction for personally identifiable information of infants and toddlers NMIAC §§ 60-50-938 to 60-50-945 2
10
Northern Marianas College Board of Regents Policy 8007: digital content the College creates or obtains must be accessible to persons with disabilities Northern Marianas College Board of Regents Policy No. 8007 (Digital Content Accessibility), under 3 CMC § 1316(e) 3
3
Public School System Technology Use Regulation: cybersecurity policies for sensitive data and audits of data access 48 Com. Reg. 053598 3
3
Scholarship Recipient List: compilation of student financial-assistance recipient information and its disclosure 3 CMC § 10108 3
3
Northern Marianas College graduate list: distribution to government entities and, on request, to private businesses 3 CMC § 1308 2
2
Special Education Program rules: confidentiality, access, consent and safeguards for personally identifiable information in special education records NMIAC §§ 60-50-530 to 60-50-541 2
2
Northern Marianas College student records: right to obtain copies of education records at cost NMIAC § 95-20.1-370 1
1
Public School System student educational records: notice, access, amendment, consent to disclosure and record of disclosures NMIAC § 60-20-428 1
1
Kentucky instructional resource adoption process: electronic file levels and vendor identification of alternative-format availability for K-12 instructional resources 704 KAR 3:455, sections 1, 3 and 5 4
4
Kentucky preferential procurement status and electronic file requirement for publishers of K-12 textbooks and instructional materials in alternative formats for students with disabilities KRS 156.027 4
4
Confidentiality, notice and release of public school student education records, with the directory information rule KRS 160.705, 160.710, 160.720 and 160.725 3
3
Kentucky Postsecondary Textbook Accessibility Act: publisher duty to provide instructional material in electronic format for postsecondary students with disabilities KRS 164.477 3
Prohibited uses of personally identifiable student information by a cloud computing service provider KRS 365.734 3
Department of Education protocols for student records in the student information system, including protection of federal student privacy rights KRS 158.448 2
2
Kentucky Longitudinal Data System: data certification, de-identification, access limits and privacy-law compliance for education and workforce data KRS 151B.132 to 151B.134 1
2
Duty of a publisher or developer of adopted instructional material to furnish the American Printing House for the Blind an electronic version KRS 156.476(2) 1
1
Kentucky Revised Statutes section 156.675, prevention of transmission of social media and sexually explicit materials to schools, and local school district policy on student internet access KRS 156.675 1
1
Private college licensing standard: compliance with the laws on disclosure of student information 13 KAR 1:020, section 8(13)(e) 1
Student Online Personal Protection Act, operator duties K.S.A. 72-6333 6
Student Data Privacy Act, consent for nonacademic surveys and questionnaires K.S.A. 72-6316 4
4
Student Data Privacy Act, disclosure of student data from a statewide longitudinal student data system K.S.A. 72-6314 3
3
Postsecondary educational institutions: no social security number on a student or employee identification card (section 76-768) K.S.A. 76-768 2
Student Data Privacy Act, biometric data collection consent K.S.A. 72-6315 2
2
Student Data Privacy Act, breach notice for student data K.S.A. 72-6318 2
Community college taxpayer and student transparency data: no aggregate scholarship figure that could identify a student (section 71-222(i)(2)) K.S.A. 71-222(i) 1
1
Private and out-of-state postsecondary institutions: student records kept secure as a condition of a certificate of approval (K.A.R. 88-28-2(a)(5)) K.A.R. 88-28-2(a)(5) 1
Student Data Privacy Act, publication of statewide longitudinal student data system categories K.S.A. 72-6319 1
1
Student records: boards must adopt right-of-privacy policies (section 72-6311 as amended in 2014) K.S.A. 72-6311 1
1
Student data privacy: duties of an operator of a site, service or application used for school purposes A.R.S. sec. 15-1046 6
University and community college student identification numbers: no social security number as the identifier, no public display A.R.S. sec. 15-1823 5
5
Licensed private postsecondary institutions: student records kept electronically in a non-proprietary format, secured against theft and tampering, and handed to the Board on closure Ariz. Admin. Code R4-39-401(A), (B) and (G) and R4-39-402(A) 3
Student level data: Department of Education confidentiality, data security plan, disclosure agreements and education database A.R.S. secs. 15-1042, 15-1043 and 15-1045 2
2
Arizona Revised Statutes section 15-120.05, school district and charter school policies on student internet access, social media platforms and wireless communication devices (Laws 2025, chapter 53, House Bill 2484) A.R.S. 15-120.05 1
1
Arizona rule requiring publishers to deliver accessible electronic files of instructional materials to the state central repository Ariz. Admin. Code R7-2-407(E) 1
1
Parents' bill of rights: written parental consent before a biometric scan of a pupil or a government video or voice recording of a minor child A.R.S. sec. 1-602(A)(7) and (9) and (E) to (G) 1
Postsecondary health sciences programs: confidential criminal-history verification form for a student awaiting a fingerprint clearance card A.R.S. sec. 15-1881 1
Pupil biometric information: parental written permission and 30 days' notice before a school collects it A.R.S. sec. 15-109 1
1
Universities and community colleges: policies on documentation of a student's disability, published in accessible formats A.R.S. sec. 15-1811 1
1
Institutions of higher education: confidentiality of sexual violence, intimate partner violence and stalking reports and protection of climate survey information 20-A M.R.S. secs. 12982, 12985 4
Student Information Privacy Act: restrictions on operators of kindergarten to grade 12 school websites, services and applications 20-A M.R.S. secs. 951-953 4
Dissemination of information: education records and personal information about students 20-A M.R.S. sec. 6001 1
3
Maine Educational Loan Program and Higher Education Loan Purchase Program: confidentiality of applicant and borrower records 20-A M.R.S. secs. 11418, 11494 3
School meal applications: data submitted online is not visible to the Department of Education 20-A M.R.S. sec. 6601-A 3
3
Student social security numbers: purpose notice, opt-out and deletion 20-A M.R.S. sec. 6001-C 2
Education of children with disabilities: accessible instructional materials and Braille instruction in school administrative units Policy and purpose, 20-A M.R.S. sec. 7201(1) and (5) 1
1
Maine Statewide Longitudinal Data System: limits on identifiable student information 20-A M.R.S. sec. 6005 1
1
Student Data Privacy, Accessibility, and Transparency Act, restrictions on operators O.C.G.A. Sec. 20-2-666 7
Student Data Privacy, Accessibility, and Transparency Act, parental and student review of the education record O.C.G.A. Sec. 20-2-667 4
4
Georgia Student Finance Authority, confidentiality of student and former-student records O.C.G.A. Sec. 20-3-316(b) 2
2
Georgia Student Finance Commission, confidentiality of student and former-student records O.C.G.A. Sec. 20-3-236(b) 2
2
Student Data Privacy, Accessibility, and Transparency Act, Department of Education duties for the state data system O.C.G.A. Sec. 20-2-664 2
2
Student Data Privacy, Accessibility, and Transparency Act, limits on reporting and collecting student data O.C.G.A. Sec. 20-2-665 2
2
SB 351 (2024), school internet acceptable-use policies and technology protection measures O.C.G.A. Sec. 20-2-324 1
1
Student Online Personal Protection Act, operator duties for K-12 online services MCL 388.1291, 388.1293, 388.1295 6
Revised School Code, protection of pupil privacy MCL 380.1136 3
4
Internet Privacy Protection Act, educational institutions and personal internet accounts MCL 37.272, 37.274, 37.276 to 37.278 3
College and University Electronic Textbook Act, textbook publishers and electronic versions for colleges and universities MCL 390.1541 to 390.1543 2
Higher Education Authorization and Distance Education Reciprocal Exchange Act, protection of student records MCL 390.1692, 390.1695 2
Revised School Code, blind pupil's Braille literacy law, textbook publishers and electronic file versions MCL 380.1704(4), (5) 2
2
Student Online Personal Protection Act: operators of K-12 online services Tenn. Code Ann. secs. 49-1-702, 49-1-708 6
Student data governance: written consent before collecting student biometric data Tenn. Code Ann. sec. 49-1-706 3
Course Access Program Act: accessibility assurance a course provider gives for state board approval Course Access Program Act, Tenn. Code Ann. secs. 49-18-102 and 49-18-105 2
2
School and university artificial intelligence use policy duty (Tennessee Public Chapter 550, 2024) Tenn. Code Ann. § 49-2-203(a) and Title 49, Chs. 7 and 13 (Pub. Ch. 550, 2024) 2
2
Student data governance: duties of the department of education under the Data Accessibility, Transparency and Accountability Act Tenn. Code Ann. sec. 49-1-703 2
2
Student directories: opt-out of solicitations based on a directory listing (section 49-7-143(a)) Tenn. Code Ann. sec. 49-7-143 2
2
Student Information in Higher Education Act of 2005: notice of the option to consent to release of education records to a parent Tenn. Code Ann. sec. 49-7-1103 1
Transparency in Higher Education Act: website notice to parents of their rights to view student records Tenn. Code Ann. sec. 49-7-1105 1
1
Local school boards, internet filtering required (Idaho Code section 33-132) Idaho Code sec. 33-132 5
5
Student Data Accessibility, Transparency and Accountability Act (SDATAA) Idaho Code § 33-133 2
4
Athletic participation disputes over a student's biological sex: confidentiality of identities and verifying health documentation IDAPA 08.06.01, Section 010.07 3
3
Generative AI in Education Framework Act (SB 1227) Idaho S.B. 1227, 2026 Regular Session; to be codified in Idaho Code Title 33 2
Curricular materials, publishers of approved textbooks must furnish electronic format for reproduction for use by the blind Idaho Code § 33-118(2) 1
1
Generative Artificial Intelligence in Education Act, vendor disclosure duty Idaho Code section 33-7007 1
1
Proprietary school registration standards: accurate and secure student records IDAPA 08.01.11, Section 301.03.e 1
State Board of Education student policy: student records maintained consistent with FERPA, with a process to review, request changes and appeal Idaho State Board of Education Policy III.P.6, under Idaho Const. art. IX, sec. 2 and Idaho Code § 33-105(2) 1
1
Student Online Personal Protection Act: operators of K-12 sites, services and applications Student Online Personal Protection Act, Neb. Rev. Stat. §§ 79-2,153 to 79-2,155 6
Textbook contracts with publishers and manufacturers: electronic files and accessible-format rights for students who are blind or visually impaired Neb. Rev. Stat. 79-734.01 4
4
University, state college and community college boards: policy to share student data with the State Board of Education Neb. Rev. Stat. 85-110, 85-309, 85-1511(20) 3
3
Student application and admission process: no inquiry into or consideration of an applicant's criminal history or juvenile court record by a publicly funded college or university Neb. Rev. Stat. 85-607.01 2
2
Excellence in Teaching Act reports: no confidential or identifying borrower information Neb. Rev. Stat. 85-3114(2) 1
Special education rule on access to instructional materials for children with print disabilities 92 Neb. Admin. Code ch. 51, 004.15 1
1
University of Nebraska records: student academic records and personal information in student records released only on written authorization Bylaws of the Board of Regents of the University of Nebraska, section 1.4.4, under Neb. Rev. Stat. 85-106(1) 1
1
Braille Access Act: publishers must supply instructional materials in accessible electronic formats Braille Access Act, NMSA 1978, Secs. 22-15-28, 22-15-29 and 22-15-31 3
Instructional material contracts: reproduction right and electronic formats for students with visual impairment Contracts with publishers, NMSA 1978, Sec. 22-15-13(D) and (E) 3
3
Post-secondary institutions may not transfer undergraduate student information to credit card issuers NMSA 1978, Sec. 21-1-45 (sale of student information; marketing credit cards to students; prohibited practices) 3
School districts and charter schools must keep personally identifiable educational records in accordance with FERPA Standards for Excellence, general provisions, records and reports, 6.29.1.9(F) NMAC 3
3
Post-secondary institutions may not demand access to student social networking accounts NMSA 1978, Sec. 21-1-46 (request for access to social networking account prohibited) 2
Distance learning and computer-based course materials must be usable by students with disabilities Distance Learning Act, distance learning and computer-based courses, NMSA 1978, Sec. 22-30-7 (Laws 2026, ch. 8, Sec. 11) 1
1
Post-secondary institutions' affirmative consent policies must protect the confidentiality of parties and witnesses in investigations NMSA 1978, Sec. 21-1-51 (policies and procedures addressing affirmative consent; protections in investigations) 1
Private post-secondary institutions must certify compliance with Americans with Disabilities Act regulations for their academic support resources to be licensed Licensure under the Post-Secondary Educational Institution Act, 5.100.7 NMAC, s. 5.100.7.10(T) 1
Public post-secondary institutions' first-year outcome reports to high schools may not include personally identifiable student information NMSA 1978, Sec. 21-1-43 (first year of college outcomes of New Mexico public high school graduates; annual reports) 1
1
Inclusive library services with assistive technology at the University of Puerto Rico, private universities and other institutions of higher education (Ley 63-2011) Ley Núm. 63 de 15 de abril de 2011, Arts. 2-5 y 7 (18 L.P.R.A. §§ 1081-1084) 5
University of Puerto Rico: display of a student's chosen name in place of the legal name in the University's electronic services (Protocolo para el Reconocimiento del Nombre Escogido por Estudiantes) Universidad de Puerto Rico Junta de Gobierno, Certificación 53 (2025-2026), Protocolo para el Reconocimiento del Nombre Escogido por Estudiantes (Reglamento Núm. 9722), Arts. VI y VIII, under Ley Núm. 1 de 20 de enero de 1966, Art. 3(H)(5)4
4
Puerto Rico internet protection act for children and youth: filters on school, library and other public access computers Ley para la Protección de los Niños, Niñas y Jóvenes en el Uso y Manejo de la Red de Internet (Ley Núm. 267 de 2000), Arts. 4 a 7 1
3
Department of Education information systems: student information systems, data protection policies and review of technology contracts by the Innovation and Technology Service (Ley de Reforma Educativa de Puerto Rico, Art. 2.27) Ley Núm. 85-2018, Art. 2.27, Oficial Principal de Informática (3 L.P.R.A. § 9802x) 2
2
Private basic education institutions: protocol for the security of academic records and the confidentiality of students' personal information (Ley de Registro y Licenciamiento de Instituciones de Educación, Sec. 10) Ley Núm. 212 de 2018, Sec. 10(9), instituciones de educación básica (18 L.P.R.A. § 2360) 2
Education Reform Act, Art. 10.08: publishers supply curriculum books in computer format for blind students (Ley de Reforma Educativa de Puerto Rico) Ley Núm. 85 de 29 de marzo de 2018, Art. 10.08(D) y (E) (3 L.P.R.A. § 9810f-1) 1
1
Licensing of postsecondary education institutions: guarantees for the security of students' academic records (Ley de Registro y Licenciamiento de Instituciones de Educación) Ley Núm. 212 de 12 de agosto de 2018, Secs. 13 y 16 (18 L.P.R.A. §§ 2363 y 2366) 1
Board of Regents personally identifiable information and Social Security number policies South Dakota Board of Regents Policies 5.14 and 7.7 3
3
Board of Regents technology purchases and accessibility policy South Dakota Board of Regents Policy 7.6 3
3
Board of Regents student records policies: confidentiality of student records and public access to directory information South Dakota Board of Regents Policies 3.3.1 and 3.3.2 2
2
School district student mailing lists to the Board of Regents and technical colleges: required use and directory-information opt-out SDCL sec. 13-28-50 2
2
South Dakota Codified Laws section 22-24-55, public school duty to limit minors' access to obscene materials and to adopt and publish a local policy (2024 House Bill 1197) S.D. Codified Laws § 22-24-55 2
2
Student surveys, analyses and evaluations: prior consent for sensitive topics SDCL sec. 13-3-51.2 (SL 2014, ch. 76, sec. 3) 2
State educational data system: limit on collecting student information SDCL sec. 13-3-51 (SL 2014, ch. 76, sec. 2) 1
1
Student education records: Department of Education privacy duties SDCL secs. 13-3-51.1 and 13-3-51.3 to 13-3-51.6 (SL 2014, ch. 76) 1
1
Student Online Personal Information Protection: operator duties for K-12 school services Haw. Rev. Stat. Secs. 302A-499, 302A-500 7
Uniform Employee and Student Online Privacy Protection Act: educational institutions may not require a student's online account login or content 2021 Haw. Sess. Laws Act 39 (H.B. 125) student online accounts, sections -1, -2, -4 and -5, Uniform Employee and Student Online Privacy Protection Act4
Instructional materials for exceptional children: accessible formats and technology Haw. Rev. Stat. Sec. 302A-442.5 2
2
Records of a closed private college or university: privacy of personal information on disposal by the department of commerce and consumer affairs Haw. Rev. Stat. Sec. 305J-13 1
University of Hawaii program-level transparency dashboard: student privacy in reported data Act 120, Session Laws of Hawaii 2026 (H.B. 2158, C.D. 1), new section of Haw. Rev. Stat. ch. 304A, subsec. (f) 1
1
Student Privacy: operators of PreK-12 school sites, services and applications 9 V.S.A. secs. 2443 to 2443f 7
Immigration protocols: student information privacy duties of school districts and schools 16 V.S.A. sec. 1486(c), (d)(3) 4
Vermont Statutes Annotated Title 16, section 584, use of social media platforms in education (Act 72 of 2025) 16 V.S.A. § 584 1
1
2
Educational Technology: registration of providers of educational technology products 9 V.S.A. sec. 2444a; 2026 Vt. Acts & Resolves Act 138, Sec. 4 1
Vermont State Colleges: use of a student’s chosen first name in place of the legal name in records and systems (Board Policy 315) Vermont State Colleges Board Policy 315 (Chosen Name), under 16 V.S.A. sec. 2174 1
1
HB 1315 (2023), vendor safety policies and technology protection measures for digital and online resources offered to K-12 students and minors by public bodies HB 1315 (2023), Miss. Code Ann. 37-11-81 and 39-3-25 6
Postsecondary student records: approved institutions maintain academic records securely and protect student personally identifiable information under FERPA 10 Miss. Admin. Code Pt. 201, Mississippi Commission on College Accreditation Standards and Regulations, Standards 3.15 and 4.17 5
Textbook and Instructional Materials Administration Handbook: publisher rule on electronic files for Braille textbooks (NIMAS) 7 Miss. Admin. Code Pt. 196 Textbook and Instructional Materials Administration Handbook, Publisher Regulations and Procedures, Electronic Files for Braille Textbooks (NIMAS)3
3
Student data accessibility, transparency, and accountability rule for the statewide longitudinal data system Mo. Rev. Stat. Sec. 161.096 4
5
Anonymous reporting methods at public institutions of higher education that keep the reporting party's identity unknown Mo. Rev. Stat. Sec. 173.1200 2
2
Missouri school bus safety cameras: school board approval, permanent deletion within 180 days of images not used for enforcement, and no use for automated traffic enforcement Mo. Rev. Stat. Sec. 160.3300 1
2
Public schools and public libraries, filtering of public access computers used by minors (Mo. Rev. Stat. section 182.827) Mo. Rev. Stat. secs. 182.825 and 182.827 1
2
Captioning of electronic video instructional materials offered for adoption or sale in Missouri Mo. Rev. Stat. Sec. 170.135 1
No list, registry or database of students based on their religious or political views at Missouri public postsecondary institutions Mo. Rev. Stat. Sec. 173.002 1
1
Student athlete name, image and likeness contract terms treated as FERPA records at private Missouri postsecondary institutions Mo. Rev. Stat. Sec. 173.280 1
State Commission on Higher Education rules for licensed nonpublic postsecondary institutions: student records (Regulation 62-20) S.C. Code Regs. 62-20 6
Education Scholarship Trust Fund: confidentiality of scholarship applicants' and students' personally identifiable information, and student privacy duties of the Department of Education and the Education Oversight Committee S.C. Code Ann. secs. 59-8-120(B) and 59-8-150(D) and (E) 4
4
Tucker Hipps Transparency Act: fraternity and sorority conduct reports of public institutions of higher learning, with no personal identifying information of members S.C. Code Ann. sec. 59-101-210 2
2
South Carolina Department of Education Data Use and Governance Policy (student data) S.C. Code Ann. sec. 59-1-490 1
1
Student online personal information protection: operators of kindergarten through grade twelve sites, services and applications Iowa Code § 279.71 7
Iowa community colleges: security plan for the confidentiality of student records Iowa Admin. Code r. 281-21.2(10) 1
1
Iowa special education rules on the purchase of print instructional materials: written publisher contract requiring NIMAS files for NIMAC or specialized formats Iowa Admin. Code r. 281-41.210(3)(a) (special education purchase of print instructional materials) 1
1
State Board of Regents: confidentiality of applicant personal information in the annual report on Iowa-resident admissions to the University of Iowa's colleges of medicine and dentistry and residencies Iowa Code § 262.9(39)(d)(2) 1
1
Student surveys: parent or guardian consent before a school district requires a student to take part in a survey on protected subjects, and before an employee or contractor answers a social or emotional survey about a student Iowa Code § 279.79 1
1
Student social media privacy: an educational institution may not require a student or applicant to reveal or open a personal social media account R.I. Gen. Laws secs. 16-103-1 to 16-103-6 4
Student data and cloud computing services: kindergarten through grade 12 student data R.I. Gen. Laws sec. 16-104-1 3
Student Success Act: nonresident tuition exemption at public colleges, the affidavit that may not ask immigration status, and notice when that status is shared R.I. Gen. Laws sec. 16-59-9.3 2
2
Rhode Island Integrated Data System Act: security, privacy and confidentiality of the statewide longitudinal data system that links education records R.I. Gen. Laws secs. 42-165-3 to 42-165-7 1
State university and college electronic student unit record system: public institutions report student-level data to the Alabama Commission on Higher Education Ala. Code sec. 16-5-7 4
4
Teacher preparation program applicants: colleges require a criminal history background check as part of the application process Ala. Code sec. 16-23-16.2 3
Alabama Community College System student records policy: each college protects the security, confidentiality and integrity of student records and complies with FERPA Alabama Community College System Board of Trustees Policy 808.01, under Ala. Code sec. 16-60-111.4(a)(1) 1
1
Special education rule on access to instructional materials: public agencies provide accessible-format materials to children with disabilities Ala. Admin. Code r. 290-8-9-.07(7) 1
1
Student Data Accessibility, Transparency and Accountability Act of 2013: State Board of Education duties for the student data system Student Data Accessibility, Transparency and Accountability Act of 2013, Okla. Stat. tit. 70, Sec. 3-168 3
3
Oklahoma Responsible Technology in Schools Act: student data duties for artificial intelligence tools in public school districts Oklahoma Responsible Technology in Schools Act Enrolled Senate Bill 1734 (2026), section 1, to be codified as Okla. Stat. tit. 70, Sec. 11-1202
2
Oklahoma textbook publisher duty to furnish electronic files from which Braille and other accessible versions of instructional materials can be produced Okla. Stat. tit. 70, Sec. 16-106(D) 2
2
Open Records Act: confidentiality of student records and the directory-information notice and redisclosure limits of public educational institutions Okla. Stat. tit. 51, Sec. 24A.16 1
1
State Regents distance education policy: online course design standards must meet accessibility standards Oklahoma State Regents for Higher Education, Policy and Procedures Manual, Sec. 3.17.3(A)(1), under Okla. Stat. tit. 70, Sec. 3206(a) 1
1
University of Guam Email Policy: no identification numbers in email, no forwarding to outside accounts, and limits on monitoring message contents Email Policy, University of Guam Board of Regents Resolution No. 19-09 (IT-UPM section 3.10), under 17 GCA §§ 16104.1(a) and 16108 3
3
Guam Academy Charter School Act of 2009: charter school annual report data may not identify individuals 17 GCA § 12107(n)(11) 2
2
University of Guam Security Camera Policy: access, placement, retention and release of security camera data Security Camera Policy, University of Guam Board of Regents Resolution No. 21-25, under 17 GCA §§ 16104.1(a) and 16108 2
2
Free Application for Federal Student Aid: no retention of the applicant's confidential information 17 GCA § 3223 1
Alaska scholarship program information: a high school may not give a student's name to the Board of Regents over a parent's objection Alaska Stat. Sec. 14.43.930 2
Alaska school and district report cards to the public: no reporting that would reveal personally identifiable information about a student (4 AAC 06.895(f)) 4 AAC 06.895(f) 2
2
Alaska Commission on Postsecondary Education: removal of personal identifiers from the education and workforce database, and no unit records to the federal government Alaska Stat. Sec. 14.42.035 1
1
University of Alaska Regents' Policy on information and technology resources: limits on access to users' communications and files Regents' Policy 02.07.060 1
1
University of Alaska Regents' Policy: confidentiality of disability documentation submitted by students seeking accommodations Regents' Policy 09.06.060 1
1
Indiana Code section 20-26-5-40.5, school Internet use policy, content filter and parental device controls Ind. Code sec. 20-26-5-40.5 3
3
Personal analyses, evaluations or surveys of students by third party vendors Ind. Code §§ 20-26-21-1 to 20-26-21-9 2
2
State educational institutions: public hazing report may not include students' personal identifying information Ind. Code §§ 21-39-9.1-2, 21-39-9.1-3(b) 2
2
Online protections for pupils: operators of K-12 online applications Mont. Code Ann. §§ 20-7-1324, 20-7-1325 5
Montana University System computer and network monitoring: personally identifiable information obtained through monitoring is not divulged Montana Board of Regents Policy 1302, under Mont. Const. art. X, sec. 9(2)(a) and Mont. Code Ann. § 20-25-301(1), (3) 1
1
Parental rights: consent before a government entity scans a child's biometrics or records a child, and opt-in to school data collection Mont. Code Ann. § 40-6-701(2) 1
Student data protection policy of a school district (section 15.1-07-25.3 as amended in 2025) N.D. Cent. Code § 15.1-07-25.3 4
4
Admission application records of institutions under the state board of higher education: exempt, destroyed on request N.D. Cent. Code § 44-04-18.34 1
1
Disclosure of grade ten and eleven student names, addresses and telephone numbers to the North Dakota university system N.D. Cent. Code § 15.1-07-25.1 1
1
Statewide longitudinal data system: access terms, data protection practices, privacy and security audits and breach notice protocols N.D. Cent. Code § 54-59-34 1
Community College Commission rules: secure storage of student data and reports that do not identify students 057-2 Wyo. Code R. sec. 9(h); 057-7 Wyo. Code R. sec. 6(c) 2
2
School bus video recordings: not a public record and destroyed within one year Wyo. Stat. Ann. sec. 21-3-131(b)(x) 1
1
Virtual education course developers: assurance to the district on student data privacy and data security 206-41 Wyo. Code R. sec. 41-3(l)(ii) 1
1
Student lists: no release to an unaccredited private post-secondary institution 17 V.I.C. §§ 201(c)(2), 202 1
1
United States 1,631 lines in 605 laws
US-Ohio
US-Washington
US-California
US-Illinois
US-Oregon
US-Texas
US-Utah
US-Colorado
US-New York
US-Arkansas
US-Maryland
US-New Hampshire
US-North Carolina
US-West Virginia
US-District of Columbia
US-Florida
US-Massachusetts
US-Nevada
US-Virginia
US-Connecticut
US-Pennsylvania
US-Delaware
US-Louisiana
US-Minnesota
US-New Jersey
US-Wisconsin
US-Northern Mariana Islands
US-Kentucky
US-Kansas
US-Arizona
US-Maine
US-Georgia
US-Michigan
US-Tennessee
US-Idaho
US-Nebraska
US-New Mexico
US-Puerto Rico
US-South Dakota
US-Hawaii
US-Vermont
US-Mississippi
US-Missouri
US-South Carolina
US-Iowa
US-Rhode Island
US-Alabama
US-Oklahoma
US-Guam
US-Alaska
US-Indiana
US-Montana
US-North Dakota
US-Wyoming
US-U.S. Virgin Islands
European Union 11 lines in 4 laws
Estonia
Malta
Sweden
Canada 8 lines in 2 laws
Seychelles 1 line in 1 law