Nonprofit Surveys Student Privacy Laws for All 50 States

A nonprofit organization today released a state-by-state survey of student privacy laws in the United States. The Center for Democracy & Technology (CDT), with help from law firm BakerHostetler, collected information from all 50 states to create the State Student Privacy Law Compendium.

Organized by each state, CDT’s compendium offers insights into key issues under the following categories:

  • Definitions – Looks at how the state defines “education record” and “student data” (if at all) in legislation;
  • Limitations – Examines the use of limitations, including third party sharing of student information, as well as the exceptions to these limitations;
  • Data Minimizations – Identifies any data retention, de-identification or aggregation limits;
  • Security – Lists any mandates for specific security practices or any data security programs within the state;
  • Auditing and Accountability – Identifies whether the state requires school districts or companies to have a chief privacy officer (CPO) or not, and if there is a compliant process for students and parents when the state law has been violated; and
  • Individual Participation – Reveals whether the state allows parents and students to opt-out of certain data collection or sharing.

In 2015, states introduced more than 180 bills, of which 28 passed to become laws. So far this year, 36 states have introduced 112 bills, of which 16 passed in 14 states, according to an analysis from the Data Quality Campaign. “CDT expects the number of student data privacy laws to increase exponentially over the next decade,” according to the compendium.

Further information is available in the State Student Privacy Law Compendium.

About the Author

Sri Ravipati is Web producer for THE Journal and Campus Technology. She can be reached at [email protected].

Featured

  • lightbulb

    Call for Speakers Now Open for Tech Tactics in Education: Overcoming Roadblocks to Innovation

    The annual virtual conference from the producers of Campus Technology and THE Journal will return on Sept. 25, 2025, with a focus on emerging trends in cybersecurity, data privacy, AI implementation, IT leadership, building resilience, and more.

  • abstract pattern of cybersecurity, ai and cloud imagery

    Report Identifies Malicious Use of AI in Cloud-Based Cyber Threats

    A recent report from OpenAI identifies the misuse of artificial intelligence in cybercrime, social engineering, and influence operations, particularly those targeting or operating through cloud infrastructure. In "Disrupting Malicious Uses of AI: June 2025," the company outlines how threat actors are weaponizing large language models for malicious ends — and how OpenAI is pushing back.

  • illustration of a human head with a glowing neural network in the brain, connected to tech icons on a cool blue-gray background

    Meta Introduces Stand-Alone AI App

    Meta Platforms has launched a stand-alone artificial intelligence app built on its proprietary Llama 4 model, intensifying the competitive race in generative AI alongside OpenAI, Google, Anthropic, and xAI.

  • semi-transparent AI brain with circuit elements under a microscope

    AI 'Microscope' Reveals the Hidden Mechanics of LLM Thought

    Anthropic has introduced new research tools designed to provide a rare glimpse into the hidden reasoning processes of advanced language models — like a "microscope" for AI.