EdLaw

• International
  • EU
    • EAA
      • Accessibility requirements for products and services
      • Transposition, application dates and transitional measures
      • EU declaration of conformity and CE marking
      • Fundamental alteration, disproportionate burden and presumption of conformity
      • Market surveillance, compliance of services, enforcement and penalties
      • Accessibility duty and economic-operator obligations
      • Subject matter, scope and definitions
    • EU AI Act
      • Entry into force, application dates and transitional provisions
      • Subject matter, scope, definitions, AI literacy
      • General-purpose AI models
      • Classification of high-risk AI systems
      • Requirements for high-risk AI systems
      • Obligations of providers and deployers
      • Prohibited AI practices
      • Remedies and penalties
      • Transparency obligations for certain AI systems
    • Data Act
      • Entry into force and application
      • Access by design and the user data-access and sharing rights
      • Subject matter, scope and definitions
    • DSA
      • Due-diligence duties for all intermediaries and hosting services
      • Liability exemptions and no general monitoring
      • Online-platform gate and protection of minors
      • Subject matter, scope and definitions
    • ePrivacy Directive
      • Subject matter, scope and definitions
      • Security, confidentiality and the cookie rule
      • Traffic data and location data
      • Unsolicited communications
    • EU GDPR
      • Automated individual decision-making
      • Children's consent
      • Codes of conduct and certification
      • Controller and processor obligations
      • Rights of the data subject
      • Data protection impact assessment and prior consultation
      • Administrative fines
      • International transfers
      • Lawful bases, consent and special categories
      • Principles relating to processing of personal data
      • Security of processing and breach notification
    • NIS2
      • Definitions
      • Cybersecurity risk-management measures and reporting obligations
      • Subject matter, scope, essential and important entities
      • Sectors of high criticality and other critical sectors
    • EU product-safety cluster
      • EMC Directive
        • EU declaration, CE marking, penalties
        • Obligations of economic operators
        • Essential requirements, presumption of conformity, conformity assessment
        • Subject matter, scope and definitions
      • GPSR
        • Repeal, transition and application
        • Obligations of economic operators
        • Recalls, remedies and penalties
        • The general safety requirement and its assessment
        • Subject matter, scope and definitions
      • RED
        • Conformity assessment, EU declaration and CE marking
        • Formal non-compliance, penalties and transition
        • Essential requirements and presumption of conformity
        • Obligations of economic operators
        • Subject matter, scope and definitions
      • RoHS
        • Economic-operator obligations, EU declaration, CE marking, penalties
        • Subject matter, scope and definitions
        • The restricted substances and exemption machinery
      • Toy Safety Regulation
        • Repeal of Directive 2009/48/EC, transition, application dates
        • Conformity, CE marking and the digital product passport
        • Obligations of economic operators
        • Essential safety requirements and warnings
        • Subject matter, scope and definitions
      • WEEE
        • Penalties, inspection and monitoring
        • Producer obligations: design, financing, information, registration
        • Subject matter, scope and definitions
    • EU WAD
      • Accessibility requirements and presumption of conformity
      • Committee, delegation, transposition and review
      • Subject matter, scope and definitions
      • Accessibility statement, monitoring and enforcement
• National
  • AE
    • AE PDPL
      • الإمارات — مرسوم بقانون اتحادي رقم (45) لسنة 2021 بشأن حماية البيانات الشخصية
    • state
      • AZ
      • DU
        • KHDA school data (research note)
  • AT
    • AT BilDokG 2020
      • BilDokG 2020 — Evidenzen der Schülerinnen und Schüler, Datenverbund der Schulen
    • AT DSG
      • DSG — Grundrecht auf Datenschutz, Einwilligung von Kindern, Geldbußen
    • AT SchUG §§ 14a, 70a
      • SchUG — IKT-gestützter Unterricht und elektronische Kommunikation
  • AU
    • AU Privacy Act
      • Privacy Act 1988 — Children's Online Privacy Code (s 26GC), APP 8, APP 11
    • state
      • NSW
        • NSW DoE Cyber security procedures
          • NSW Department of Education — Cyber security procedures (PD-2015-0465-02)
        • NSW DoE Privacy standards
          • NSW Department of Education — Privacy standards (PD-2024-0485-07)
      • QLD
        • Qld DoE Non-departmental ICT service providers
          • Queensland Department of Education — Non-departmental ICT service providers procedure
        • Qld DoE Student consent procedure
          • Queensland Department of Education — Obtaining and managing student and individual consent procedure
          • Queensland Department of Education — Guideline for obtaining and managing Online Services Consent
      • VIC
        • Vic Schools' privacy policy
          • Victoria Department of Education — Schools' privacy policy
  • BG
  • CN
    • CN CSL (2025)
      • 网络安全法（2025修正） — 网络安全等级保护与关键信息基础设施数据本地化
    • CN Minors Online Reg.
      • 未成年人网络保护条例 — 未成年人个人信息网络保护与防沉迷义务
    • CN PIPL
      • 个人信息保护法 — 处理根据、敏感信息与儿童、跨境提供
  • CZ
    • Školský zákon
      • Dokumentace škol, školní matrika a distanční vzdělávání
    • Zákon 110/2019 Sb.
      • Souhlas dítěte a správní tresty
    • ZKB 264/2025
      • Regulované služby po transpozici NIS2
  • DE
    • BDSG
      • Besondere Kategorien und Beschäftigtendaten
      • Anwendungsbereich und Begriffsbestimmungen
      • Aufsichtsbehörden der Länder
    • state
      • BB
      • BE
      • BW
      • BY
        • BayDSG
          • Bayerisches Datenschutzgesetz — für Schulen und ihre Auftragsverarbeiter maßgebliche Artikel
        • BayEUG Datenschutz
          • Verarbeitung personenbezogener Daten und automatisierte Schulverfahren
      • HB
      • HE
      • HH
      • MV
      • NI
      • NW
        • DSG NRW
          • Datenschutzgesetz Nordrhein-Westfalen — für Schulen und ihre Auftragsverarbeiter maßgebliche Vorschriften
        • SchulG NRW Datenschutz
          • Schutz der Daten im Schulbereich
        • VO-DV I/II NRW
          • Verordnung über die zur Verarbeitung zugelassenen Daten von Schülerinnen, Schülern und Eltern (VO-DV I)
          • VO-DV II — Anlagen 1–8 (Datenbestände der Lehrkräfte und des sonstigen Personals)
          • Verordnung über die zur Verarbeitung zugelassenen Daten der Lehrerinnen und Lehrer sowie des sonstigen Personals im Schulbereich (VO-DV II)
      • RP
      • SH
      • SL
      • SN
        • SächsDSDG
          • Sächsisches Datenschutzdurchführungsgesetz — für Schulen und ihre Auftragsverarbeiter maßgebliche Vorschriften
        • SächsSchulG Datenschutz
          • E-Learning, Schuldatenschutz, Statistik und Informationsbefugnisse
          • Sachsen — VwV Schuldatenschutz
      • ST
        • SchulG LSA § 84a(13) ordinance (research note)
      • TH
        • ThürSchulG § 57(8) ordinance (research note)
  • ES
    • ES LOPDGDD
      • LOPDGDD — consentimiento de menores (14), régimen de responsables públicos, derechos digitales educativos
  • GB
    • UK Children's Code
      • ICO Children's Code — the 15 standards of age appropriate design
    • DPA 2018
      • Children in Scotland
      • Schedule 2 — exemptions etc from the UK GDPR
      • General processing: supplements to the UK GDPR
      • Schedule 3 — exemptions for health, social work, education and child abuse data
      • Overview and key terms
      • Schedule 1 — special categories and criminal convictions conditions
    • UK Equality Act
      • Reasonable adjustments, services and schools
    • UK GDPR
      • Children's consent and age verification
      • Controller and processor obligations
      • Rights of the data subject
      • Data protection impact assessment and prior consultation
      • Enforcement, remedies and penalties
      • International transfers
      • Lawful bases, consent and special categories
      • Principles relating to processing of personal data
      • Security of processing and breach notification
    • UK OSA 2023
      • Schedule 1 — exempt services
      • Regulated services: definitions
    • UK PECR
      • Cookies and electronic-mail marketing
      • Schedule A1 — storage of, or access to, information
    • UK Prevent duty
      • The Prevent duty
    • UK PSBAR
      • Scope, accessibility requirement and statement
    • state
      • ENG
        • DfE digital standards
          • DfE cyber security standards (core standard)
          • DfE filtering and monitoring standards (core standard)
        • DfE generative AI product safety standards
          • Generative AI: product safety standards
        • KCSIE 2026
          • KCSIE 2026 — The designated safeguarding lead (paragraphs 57–63, 127–131 and Annex B)
          • KCSIE 2026 — Online safety (paragraphs 164–183)
      • NIR
        • NI Child Protection and Safeguarding in Education
          • Child Protection and Safeguarding in Education — status and roles (sections 1.3, 2.6–2.9)
          • Child Protection and Safeguarding in Education — respond, record, refer (sections 4.9–4.10, 4.11–4.21)
      • SCT
        • NGCP Scotland
          • Education: single-agency responsibilities for child protection
          • Information sharing: inter-agency principles
          • Child protection in the digital environment/online safety
          • How to respond to and report a child protection concern
        • GIRFEC information sharing
          • Annexes: glossary, information sharing charters, frequently asked questions, Article 8 two-part test
          • Sharing information for assessment and planning; chronologies
          • Background, key considerations and deciding to share
          • Lawful bases, special category data, child protection and confidentiality
        • RIS Regulations 2006
          • Registration of Independent Schools (Scotland) Amendment Regulations 2021 (SSI 2021/251)
          • Disclosure (Scotland) Act 2020 (Incidental, Supplementary and Consequential Provision) Regulations 2025 (SSI 2025/74) — citation and commencement
          • Disclosure (Scotland) Act 2020 consequential amendments to these Regulations (SSI 2025/74, schedule 1 paragraph 12)
          • Regulations 1–5 (2006 text)
          • Schedule 1 — particulars information: applications for registration and registered schools (2006 text)
          • Schedule 2 — particulars information: registered schools (2006 text)
      • WLS
        • Keeping learners safe
          • Keeping learners safe — the designated safeguarding person (paragraphs 1.11, 2.12–2.29, 2.33–2.35)
          • Keeping learners safe — responding to and reporting concerns (paragraphs 3.11–3.17, 3.31–3.46)
  • IL
  • IT
    • ACN Regolamento cloud
      • Regolamento cloud ACN n. 21007/24 — Allegato 1 — Modalità per la predisposizione dell’elenco e della classificazione dei dati e dei servizi della pubblica amministrazione
      • Regolamento cloud ACN n. 21007/24 — Allegato 2 — Livelli minimi di sicurezza e affidabilità, capacità elaborativa, risparmio energetico delle infrastrutture digitali
      • Regolamento cloud ACN n. 21007/24 — Allegato 3 — Caratteristiche di base dei servizi cloud per la pubblica amministrazione
      • Regolamento cloud ACN n. 21007/24 — Allegato 4 — Requisiti per l’adeguamento e la qualificazione
      • Regolamento per le infrastrutture digitali e per i servizi cloud per la pubblica amministrazione (ACN, n. 21007/24)
    • AGID Linee guida accessibilità
      • Linee guida sull’accessibilità degli strumenti informatici (AGID, 2022)
    • Codice privacy
      • Consenso del minore, categorie particolari e dati degli studenti
    • Garante — scuola
      • Impronte digitali per la rilevazione delle presenze in un istituto scolastico (provvedimento 27 marzo 2025, n. 167)
      • Didattica a distanza: prime indicazioni (provvedimento 26 marzo 2020, n. 64)
      • Parere sulle Linee guida del MIM per l’introduzione dell’IA nelle istituzioni scolastiche (4 agosto 2025, n. 454)
    • Legge Stanca
      • Accessibilità degli strumenti informatici
  • KR
    • KR 원격교육법
      • 원격교육법 — 원격교육 데이터의 처리와 개인정보 등의 보호
    • KR 초·중등교육법 §§30-4–6
      • 초·중등교육법 — 교육정보시스템(NEIS)과 학생 자료 제공의 제한
    • KR 교육기본법 §23-3
      • 교육기본법 — 학생정보의 보호원칙
    • KR Network Act §50
      • 정보통신망법 — 영리목적의 광고성 정보 전송 제한
    • KR PIPA
      • 개인정보 보호법 시행령 — 동의를 받는 방법, 아동의 개인정보 보호, 처리위탁 시 조치, 안전성 확보 조치
      • 개인정보 보호법 — 수집·이용의 근거와 아동의 개인정보 보호
  • NL
    • NL UAVG
      • UAVG — toestemming (16 jaar), boetes aan overheden, biometrie, BSN
  • PL
    • KSC
      • Podmioty kluczowe i ważne po transpozycji NIS2
    • PKE
      • Pliki cookies i marketing bezpośredni (transpozycja ePrivacy)
    • Prawo oświatowe
      • Narzędzia cyfrowe, monitoring wizyjny i kształcenie na odległość
    • Ustawa o systemie oświaty
      • Podręczniki elektroniczne i warunki dopuszczenia do użytku szkolnego
    • UODO
      • Zakres ustawy, organ nadzorczy i kary dla podmiotów publicznych
  • PT
    • PT DL 83/2018
      • Portugal — Decreto-Lei n.º 83/2018 (acessibilidade dos sítios web e das aplicações móveis)
    • PT Lei 41/2004
      • Lei 41/2004 — armazenamento de informação (cookies) e comunicações não solicitadas
    • PT Lei 58/2019
      • Lei 58/2019 — consentimento de menores e contraordenações
  • RO
    • Legea 190/2018
      • România — Legea nr. 190/2018 (punerea în aplicare a GDPR)
    • Legea 198/2023
      • România — Legea nr. 198/2023 a învățământului preuniversitar (articole selectate)
    • Legea 506/2004
      • România — Legea nr. 506/2004 (confidențialitatea în comunicațiile electronice)
  • US
    • ADA Title II web rule
      • Title II definitions (including the web/mobile terms)
      • Duties and the minimal-impact noncompliance rule
      • Web and mobile accessibility requirements and exceptions
    • CIPA
      • E-Rate CIPA certification rule
    • CISA CPG
    • COPPA
      • Notice, verifiable parental consent, review rights and conditioning
      • Scope, definitions and general prohibition
      • Security, retention and deletion
    • ESSA
      • ESEA general definitions (including the evidence tiers)
      • Statement of purpose (Title I)
    • FERPA
      • Disclosure conditions, the school-official exception, and redisclosure
      • Scope, applicability and definitions
    • IDEA
      • State administration, rulemaking and confidentiality
      • IDEA definitions
      • Evaluations, eligibility, IEPs and placements
      • IDEA Part B confidentiality of information
    • NIST CSF
      • The NIST Cybersecurity Framework (CSF) 2.0 — Appendix A, CSF Core
    • PPRA
      • Protection of Pupil Rights Amendment
    • Section 504 / 508
      • Section 255 guidelines — telecommunications accessibility
      • Section 504 regulations — preschool, elementary and secondary education
      • Section 504 regulations — general provisions
      • Section 504 — nondiscrimination under Federal grants and programs
      • Section 508 standards as originally published (2000)
      • Section 508 standards — the Access Board ICT rules
      • Section 508 — electronic and information technology
    • state
      • AK
        • Alaska Personal Information Protection Act
          • Alaska Personal Information Protection Act (AS 45.48) — breach of security, disposal of records
        • AS 14.03.110 and 14.03.115
          • Alaska — AS 14.03.110 and AS 14.03.115: school questionnaires and surveys; parent access to school records
        • Alaska student data — research note
      • AL
        • Alabama Data Breach Act
          • Alabama Data Breach Notification Act of 2018 (Code of Ala. 1975 §§8-38-1 to 8-38-12)
        • Alabama device filter act (ch. 8-19H)
          • Alabama — device filters for minors (Code of Ala. 1975 §§8-19H-1 to 8-19H-5)
        • Alabama student data governance (research note)
      • AR
        • Act 952 of 2025 (Ark. Code Ann. §§4-88-1501–4-88-1505)
          • Arkansas — Arkansas Children and Teens' Online Privacy Protection Act (Act 952 of 2025; Ark. Code Ann. §§4-88-1501 to 4-88-1505)
        • Act 754 of 2023 (Ark. Code Ann. §§6-18-2601–6-18-2608)
          • Arkansas — Student Data Vendor Security Act (Act 754 of 2023; Ark. Code Ann. §§6-18-2601 to 6-18-2608)
        • Ark. Code Ann. §6-18-109
          • Arkansas — Student Online Personal Information Protection Act (Ark. Code Ann. §6-18-109)
      • AZ
        • A.R.S. §15-109 · §1-602
          • Arizona — parental consent for pupils' biometric information and recordings (A.R.S. §15-109, §1-602)
        • A.R.S. §15-1046
          • Arizona — student data privacy (A.R.S. §15-1046)
      • CA
        • AB 1159 student information
          • AB 1159 (student personal information) — chaptered text
        • AB 1405 AI auditor registry
          • AB 1405 (AI auditors: registration) — chaptered text
        • AB 1856 age assurance amendments
          • AB 1856 (Digital Age Assurance Act amendments) — chaptered text
        • AB 2246 children's online services
          • AB 2246 (online services likely to be accessed by children) — chaptered text
        • Adam's Law (SB 1119)
          • SB 1119 (Adam’s Law) — chaptered text
        • CAADCA
          • CAADCA duties (litigation-frozen)
        • CCPA §1798.120
          • CCPA/CPRA: sale or sharing of minors’ personal information
        • SB 867 chatbot toys
          • SB 867 (toys: companion chatbots) — chaptered text
        • Cal. companion chatbot law (SB 243)
          • Companion chatbots — Bus. & Prof. Code §§22601–22606
        • Cal. Digital Age Assurance Act
          • Digital Age Assurance Act — Civ. Code §§1798.500–1798.505
        • Cal. Ed. Code §49073.1
          • Required contract terms for pupil records
        • Cal. Ed. Code §49073.6
          • Pupil records: social media monitoring
        • Cal. Ed. Code §49076.7
          • Ban on collecting pupil social security numbers
        • SOPIPA
          • Operator prohibitions and duties
      • CO
        • CPA
          • Colorado Privacy Act (C.R.S. §§ 6-1-1301 to 6-1-1314)
      • CT
        • C.G.S. §§10-234aa–10-234gg
          • Connecticut — student data privacy (C.G.S. §§10-234aa to 10-234gg)
      • DC
        • D.C. Code §§ 28-3851–28-3853
          • District of Columbia — Consumer Security Breach Notification (D.C. Code §§ 28-3851–28-3853)
        • D.C. Code §§ 38-831.01–38-831.06
          • District of Columbia — Protection of Students Digital Privacy (D.C. Code §§ 38-831.01–38-831.06)
      • DE
        • 14 Del. C. §§ 8101A–8106A
          • Delaware — Student Data Privacy Protection Act (14 Del. C. §§ 8101A–8106A)
      • FL
        • FL HB 3
          • Florida — HB 3, minors and online access (Fla. Stat. §§501.1736–501.1738)
        • Fla. Stat. §1006.1494
          • Florida — student online personal information protection (Fla. Stat. §1006.1494)
        • Fla. Stat. §1002.22/.222
          • Florida — K-12 education records (Fla. Stat. §§1002.22, 1002.222)
      • GA
        • O.C.G.A. §§20-2-660 to 20-2-668
          • Georgia — Student Data Privacy, Accessibility, and Transparency Act (O.C.G.A. §§20-2-660 to 20-2-668)
      • HI
        • HRS §§302A-499 to 302A-500
          • Hawaii — Student Online Personal Information Protection (HRS §§302A-499 to 302A-500)
      • IA
        • Iowa Code ch. 715C
          • Iowa — personal information security breach protection (Iowa Code ch. 715C)
        • Iowa Code §279.71
          • Iowa — student online personal information protection (Iowa Code §279.71)
      • ID
        • Idaho Code §33-133
          • Idaho — student data: use and limitations (Idaho Code §33-133)
      • IL
        • ANCRA (325 ILCS 5/4)
          • Illinois — Abused and Neglected Child Reporting Act, persons required to report (325 ILCS 5/4)
        • BIPA
          • Illinois — Biometric Information Privacy Act (740 ILCS 14)
        • PIPA
          • Illinois — Personal Information Protection Act (815 ILCS 530)
        • SOPPA
          • Illinois — Student Online Personal Protection Act (105 ILCS 85)
      • IN
        • Ind. Code §§31-33-5-1 to -5
          • Indiana — duty to report child abuse or neglect (IC 31-33-5)
        • Ind. Code §§20-33-7-1 to -5 · §20-19-3-9.4
          • Indiana — student records (IC 20-33-7, IC 20-19-3-9.4)
      • KS
        • K.S.A. 72-6312 to 72-6320
          • Kansas — Student Data Privacy Act (K.S.A. 72-6312 to 72-6320)
        • K.S.A. 72-6331 to 72-6334
          • Kansas — Student Online Personal Protection Act (K.S.A. 72-6331 to 72-6334)
      • KY
        • KRS 365.734
          • Kentucky — student data and cloud computing service providers (KRS 365.734)
        • KRS 61.931–61.933
          • Kentucky — personal information security and breach investigation (KRS 61.931–61.933)
      • LA
        • La. R.S. 51:1951–1955
          • Louisiana — Personal Online Account Privacy Protection Act (La. R.S. 51:1951–1955)
        • La. R.S. 17:3913/3914
          • Louisiana — student information privacy (La. R.S. 17:3913, 17:3914)
      • MA
        • G.L. c. 93H
          • Massachusetts — security breaches (G.L. c. 93H)
      • MD
        • Maryland Kids Code
          • Maryland Age-Appropriate Design Code Act (Md. Code, Com. Law §§14-4801 to 14-4813)
        • Maryland Online Data Privacy Act
          • Maryland Online Data Privacy Act (Md. Code, Com. Law §§14-4701 to 14-4714)
        • Md. Code, Educ. §4-131
          • Maryland — student data privacy (Md. Code, Educ. §4-131)
      • ME
        • 20-A M.R.S. §§951–953
          • Maine — Student Information Privacy Act (20-A M.R.S. §§951–953)
      • MI
        • Michigan SOPPA
          • Michigan — Student Online Personal Protection Act (MCL 388.1291–388.1295)
      • MN
        • Minn. Stat. §13.32 (educational data) · §13.05, subd. 11
          • Minnesota — educational data and technology providers (Minn. Stat. §13.32, subds. 1, 3, 13–15; §13.05, subd. 11)
        • Minn. Stat. §13.055 and §13.08
          • Minnesota — breach of security in government data and civil remedies (Minn. Stat. §13.055; §13.08)
      • MO
        • RSMo 162.1475, 407.1500
          • Missouri — data breach notification (RSMo 162.1475 and 407.1500)
        • RSMo 161.096
          • Missouri — student data accessibility, transparency and accountability (RSMo 161.096)
      • MS
        • Miss. Code §§45-38-1 to 45-38-13
          • Mississippi — Walker Montgomery Protecting Children Online Act (Miss. Code §§45-38-1 to 45-38-13)
        • Mississippi student data — research note
      • MT
        • MCDPA
          • Montana Consumer Data Privacy Act (MCA 30-14-2801 to 30-14-2820)
      • NC
        • N.C.G.S. §115C-401.2 · §115C-402.5
          • North Carolina — student online protection (N.C.G.S. §§115C-401.2, 115C-402.5)
      • ND
        • N.D.C.C. §15.1-07-25.3
          • North Dakota — protection of student data; school district policy (N.D.C.C. §15.1-07-25.3)
      • NE
        • Neb. Rev. Stat. §§79-2,153 to 79-2,155
          • Nebraska — Student Online Personal Protection Act (Neb. Rev. Stat. §§79-2,153 to 79-2,155)
      • NH
        • RSA 189:65 to 189:68-a
          • New Hampshire — student and teacher information protection and privacy (RSA 189:65 to 189:68-a)
      • NJ
        • N.J.A.C. 6A:32-7 · 6A:32-13
          • New Jersey — student records and remote instruction (N.J.A.C. 6A:32-7, 6A:32-13)
      • NM
        • NMSA 1978, §§57-12C-1 to 57-12C-12
          • New Mexico — Data Breach Notification Act (NMSA 1978, §§57-12C-1 to 57-12C-12)
        • New Mexico student data privacy (research note)
      • NV
        • NRS 388.267–388.278
          • Nevada — privacy of data concerning pupils: duties of state and local entities (NRS 388.267 to 388.278)
        • NRS 388.281–388.296
          • Nevada — school service providers (NRS 388.281 to 388.296)
      • NY
        • NY S.9051-B
          • New York — S.9051-B / A.10379-C: unsafe AI companion features for minors (bill text)
        • NY A.9190 / S.10133
          • New York — A.9190 / S.10133: artificial intelligence prohibited in classrooms before ninth grade (bill text)
        • N.Y. Gen. Bus. Law Art. 47
          • New York — General Business Law Article 47 (artificial intelligence companion models)
        • local
          • NYC
        • 8 NYCRR Part 121
          • New York — 8 NYCRR Part 121 (data privacy and security in educational agencies)
      • OH
        • Ohio Rev. Code §§3319.325–3319.327
          • Ohio — technology providers and school-issued device monitoring (R.C. §§3319.325–3319.327)
      • OK
        • 70 O.S. §3-168 · §24-114
          • Oklahoma — Student DATA Act and student records (70 O.S. §§3-168, 24-114)
      • OR
        • OCPA
          • Oregon Consumer Privacy Act (ORS 646A.570 to 646A.589)
      • PA
        • 73 P.S. §2301 et seq.
          • Pennsylvania — Breach of Personal Information Notification Act (73 P.S. §2301 et seq.)
      • PR
        • PR Ley 111-2005
          • Ley 111-2005 — Información al Ciudadano sobre la Seguridad de Bancos de Información
        • PR Ley 185-2024
          • Ley 185-2024 — Protección de la Privacidad Cibernética de los Niños y Jóvenes
        • PR Ley 40-2024
          • Ley 40-2024 — Ciberseguridad del Gobierno de Puerto Rico (alcance y deberes de proveedores)
        • PR Ley 85-2018 Art. 1.05
          • Ley 85-2018 — Expedientes escolares (extracto de la Ley de Reforma Educativa)
      • RI
        • R.I. Gen. Laws § 16-104-1
          • Rhode Island — student data-cloud computing (R.I. Gen. Laws § 16-104-1)
        • R.I. Gen. Laws ch. 16-103
          • Rhode Island — Student Social Media Privacy (R.I. Gen. Laws §§ 16-103-1 to 16-103-6)
      • SC
        • S.C. Code §59-1-490
          • South Carolina — data use and governance policy (S.C. Code §59-1-490)
      • SD
        • SDCL 22-40-19 to 22-40-26
          • South Dakota — notice of breach of system security (SDCL 22-40-19 to 22-40-26)
        • SDCL 13-3-51 to 13-3-51.6
          • South Dakota — student data reporting and privacy of records (SDCL 13-3-51 to 13-3-51.6)
      • TN
        • Tenn. Code Ann. §§49-1-701 to 49-1-708
          • Tennessee — Data Accessibility, Transparency and Accountability Act (Tenn. Code Ann. §§49-1-701 to 49-1-708)
      • TX
        • CUBI
          • Texas — capture or use of biometric identifier (Tex. Bus. & Com. Code §503.001)
        • Tex. Educ. Code §32.151
          • Texas — student information protection (Tex. Educ. Code §§32.151–32.157)
        • Tex. Educ. Code §11.175
          • Texas — school cybersecurity (Tex. Educ. Code §11.175)
        • SCOPE Act
          • Texas — Securing Children Online through Parental Empowerment Act (Tex. Bus. & Com. Code ch. 509)
        • TDPSA
          • Texas — Data Privacy and Security Act (Tex. Bus. & Com. Code ch. 541)
        • TRAIGA
          • Texas — Responsible Artificial Intelligence Governance Act (Tex. Bus. & Com. Code ch. 551, 552)
      • UT
        • Utah Code 53E-9 Part 3
          • Utah — Student Data Protection (Utah Code §§53E-9-301 to 53E-9-311)
      • VA
        • Va. Code §22.1-289.01
          • Virginia — school service providers (Va. Code §22.1-289.01)
        • Va. Code §§22.1-287, 22.1-79.3
          • Virginia — scholastic records and school surveys (Va. Code §§22.1-287, 22.1-79.3)
      • VT
        • 9 V.S.A. §§ 2443–2443f
          • Vermont — Student Privacy (9 V.S.A. §§ 2443–2443f)
      • WA
        • RCW 19.375
          • Washington — biometric identifiers (RCW 19.375)
        • MHMD
          • Washington My Health My Data Act (RCW 19.373)
      • WI
        • Wis. Stat. §48.981(2), (3)(a)
          • Wisconsin — persons required to report child abuse or neglect (Wis. Stat. §48.981(2), (3)(a))
        • Wis. Stat. §118.125
          • Wisconsin — pupil records (Wis. Stat. §118.125)
      • WV
        • W. Va. Code §18-2-5h
          • West Virginia — student data (W. Va. Code §18-2-5h)
      • WY
        • W.S. 40-12-501 and 40-12-502
          • Wyoming — computer security breach notice (W.S. 40-12-501, 40-12-502; 6-3-901(b))
        • W.S. 21-2-202(a)(xxxiv), (xxxvii); 21-3-110(a)(xxxv)
          • Wyoming — student data privacy and security (W.S. 21-2-202(a)(xxxiv), (xxxvii); 21-3-110(a)(xxxv))
    • Title IX regulations
      • Title IX Coordinator, definitions and the recipient's response to sexual harassment
      • Grievance process for formal complaints of sexual harassment
• Organizational
  • AICPA
  • ETSI
  • FPF
    • Student Privacy Pledge
  • NAFAI
  • SDPC
  • W3C
    • WCAG
      • Web Content Accessibility Guidelines (WCAG) 2.0
      • Web Content Accessibility Guidelines (WCAG) 2.1
      • Web Content Accessibility Guidelines (WCAG) 2.2