Nonprofit Surveys Student Privacy Laws for All 50 States

A nonprofit organization today released a state-by-state survey of student privacy laws in the United States. The Center for Democracy & Technology (CDT), with help from law firm BakerHostetler, collected information from all 50 states to create the State Student Privacy Law Compendium.

Organized by each state, CDT’s compendium offers insights into key issues under the following categories:

  • Definitions – Looks at how the state defines “education record” and “student data” (if at all) in legislation;
  • Limitations – Examines the use of limitations, including third party sharing of student information, as well as the exceptions to these limitations;
  • Data Minimizations – Identifies any data retention, de-identification or aggregation limits;
  • Security – Lists any mandates for specific security practices or any data security programs within the state;
  • Auditing and Accountability – Identifies whether the state requires school districts or companies to have a chief privacy officer (CPO) or not, and if there is a compliant process for students and parents when the state law has been violated; and
  • Individual Participation – Reveals whether the state allows parents and students to opt-out of certain data collection or sharing.

In 2015, states introduced more than 180 bills, of which 28 passed to become laws. So far this year, 36 states have introduced 112 bills, of which 16 passed in 14 states, according to an analysis from the Data Quality Campaign. “CDT expects the number of student data privacy laws to increase exponentially over the next decade,” according to the compendium.

Further information is available in the State Student Privacy Law Compendium.

About the Author

Sri Ravipati is Web producer for THE Journal and Campus Technology. She can be reached at [email protected].

Featured

  • lock icons, shields, and glowing data paths

    Studies Suggest AI Is Accelerating Familiar Cyber Attacks

    Research released around the recent Black Hat USA 2026 conference demonstrates that artificial intelligence is increasing the speed and scale of cybersecurity activity without replacing the attack methods defenders already face.

  • interconnected blue glass cubes

    Anthropic Expands Enterprise Deployment Options for Claude Desktop

    Anthropic is introducing new enterprise deployment options for Claude Desktop, saying organizations that use the app through Amazon Web Services, Google Cloud, and Microsoft Foundry can now access the full desktop experience across chat, Claude Cowork, and Claude Code.

  • A glowing digital brain with neural connections and light trails

    AI Giants: It May Be Time to Slow Down

    Leaders in the artificial intelligence industry have warned for years that increasingly capable AI systems could eventually become dangerous, all the while continuing to race to build them. Now, their sentiments have changed.

  • digital gears connect in network

    Claude Intros Sonnet 5.5 with Model-Switching Cybersecurity Safeguards

    Anthropic's new Claude release, Sonnet 5.5, brings cybersecurity safeguards that can change which model handles a request during a Claude conversation. Higher-risk tasks can fall back to Sonnet 5.