New Report Explains Student Privacy under SOPIPA and Similar Regs

A national advocacy group that focuses on data privacy has issued a report that offers an overview of California's Student Online Personal Information Protection Act. SOPIPA, as it's called, is the first state law that "comprehensively" addresses student privacy, according to the Future of Privacy Forum (FPF). Since its 2014 passage and implementation at the beginning of 2016 in that state, the regulations have been borrowed heavily by numerous other states, which have used them as a template for developing their own laws.

According to FPF, 49 states have introduced almost 400 student privacy bills since 2014. Thirty-five states have passed 73 laws since 2013. Thirty-three states have introduced their own versions of SOPIPA or a "similar piece of legislation" that does the same, but is known as "student user privacy in education rights" or "SUPER."

SOPIPA was to put in place to stipulate how student information could be used by education technology companies that are serving the education market. The laws apply to companies that run websites, online services, online applications and mobile applications designed for and marketed to K-12 customers. It doesn't apply to companies that run "general audience products," even when those programs may be used for school purposes.

As the report, "FPF Guide to Protecting Student Data Under SOPIPA: For K-12 School Administrators and Ed Tech Vendors," lays out, under the terms of SOPIPA, third-party operators "must not":

  • Engage in targeted advertising based on information acquired through the use of that operator's site, service or application;
  • Use information to build a profile about K-12 students except for school purposes;
  • Sell a student's data; or
  • Disclose information except in specific, limited circumstances.

Operators are also expected to:

  • Maintain reasonable security procedures and practices;
  • Protect information from "unauthorized access, destruction, use, modification or disclosure"; and
  • Delete a student's information if the school or district requests it.

How can student information be used? According to the report, ed tech companies can use the data in two ways:

  • To conduct "legitimate research"; and
  • For product improvement, marketing and development, as long as the data is "de-identified."

The 38-page report defines terms; explains the background for specific aspects of the regulations and provides context for SOPIPA as it relates to other laws in the area of student privacy, such as the Family Educational Rights and Privacy Act (FERPA); and compares SOPIPA to the regulations introduced in other states.

The report is available for download on the FPF website here.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • three silhouetted education technology leaders with thought bubbles containing AI-related icons

    Ed Tech Leaders Rank Generative AI as Top Tech Priority

    In a recent CoSN survey, an overwhelming majority of ed tech leaders (94%) said they see AI as having a positive impact on education. Respondents ranked generative AI as their top tech priority, with 80% reporting their districts have gen AI initiatives underway, or plan to in the current school year.

  • computer monitor with a bold AI search bar on the screen

    Google Rolls Out AI Mode in Search

    About a year after introducing AI Overviews for its flagship search offering, Google has announced broad availability of AI Mode in Search.

  • glowing shield hovers above a digital cloud platform with abstract data streams and cloud icons in the background

    Google to Acquire Cloud Security Firm Wiz in $32 Billion Deal

    Google has announced it will acquire cloud security startup Wiz for $32 billion. If completed, the acquisition — an all-cash deal — would mark the largest in Google's history.

  • students using digital devices, surrounded by abstract AI motifs and soft geometric design

    Ed Tech Startup Kira Launches AI-Native Learning Platform

    A new K-12 learning platform aims to bring personalized education to every student. Kira, one of the latest ed tech ventures from Andrew Ng, former director of Stanford's AI Lab and co-founder of Coursera and DeepLearning.AI, "integrates artificial intelligence directly into every educational workflow — from lesson planning and instruction to grading, intervention, and reporting," according to a news announcement.