nat/us/state/

263 documents

AK
- Alaska Personal Information Protection Act
  - Alaska Personal Information Protection Act (AS 45.48) — breach of security, disposal of records
- AS 14.03.110 and 14.03.115
  - Alaska — AS 14.03.110 and AS 14.03.115: school questionnaires and surveys; parent access to school records
- Alaska student data — research note
AL
- Alabama Data Breach Act
  - Alabama Data Breach Notification Act of 2018 (Code of Ala. 1975 §§8-38-1 to 8-38-12)
- Alabama device filter act (ch. 8-19H)
  - Alabama — device filters for minors (Code of Ala. 1975 §§8-19H-1 to 8-19H-5)
- Alabama student data governance (research note)
AR
- Act 952 of 2025 (Ark. Code Ann. §§4-88-1501–4-88-1505)
  - Arkansas — Arkansas Children and Teens' Online Privacy Protection Act (Act 952 of 2025; Ark. Code Ann. §§4-88-1501 to 4-88-1505)
- Act 754 of 2023 (Ark. Code Ann. §§6-18-2601–6-18-2608)
  - Arkansas — Student Data Vendor Security Act (Act 754 of 2023; Ark. Code Ann. §§6-18-2601 to 6-18-2608)
- Ark. Code Ann. §6-18-109
  - Arkansas — Student Online Personal Information Protection Act (Ark. Code Ann. §6-18-109)
AZ
- A.R.S. §15-109 · §1-602
  - Arizona — parental consent for pupils' biometric information and recordings (A.R.S. §15-109, §1-602)
- A.R.S. §15-1046
  - Arizona — student data privacy (A.R.S. §15-1046)
CA
- AB 1159 student information
  - AB 1159 (student personal information) — chaptered text
- AB 1405 AI auditor registry
  - AB 1405 (AI auditors: registration) — chaptered text
- AB 1856 age assurance amendments
  - AB 1856 (Digital Age Assurance Act amendments) — chaptered text
- AB 2246 children's online services
  - AB 2246 (online services likely to be accessed by children) — chaptered text
- Adam's Law (SB 1119)
  - SB 1119 (Adam’s Law) — chaptered text
- CAADCA
  - CAADCA duties (litigation-frozen)
- CCPA §1798.120
  - CCPA/CPRA: sale or sharing of minors’ personal information
- SB 867 chatbot toys
  - SB 867 (toys: companion chatbots) — chaptered text
- Cal. companion chatbot law (SB 243)
  - Companion chatbots — Bus. & Prof. Code §§22601–22606
- Cal. Digital Age Assurance Act
  - Digital Age Assurance Act — Civ. Code §§1798.500–1798.505
- Cal. Ed. Code §49073.1
  - Required contract terms for pupil records
- Cal. Ed. Code §49073.6
  - Pupil records: social media monitoring
- Cal. Ed. Code §49076.7
  - Ban on collecting pupil social security numbers
- SOPIPA
  - Operator prohibitions and duties
CO
- CPA
  - Colorado Privacy Act (C.R.S. §§ 6-1-1301 to 6-1-1314)
CT
- C.G.S. §§10-234aa–10-234gg
  - Connecticut — student data privacy (C.G.S. §§10-234aa to 10-234gg)
DC
- D.C. Code §§ 28-3851–28-3853
  - District of Columbia — Consumer Security Breach Notification (D.C. Code §§ 28-3851–28-3853)
- D.C. Code §§ 38-831.01–38-831.06
  - District of Columbia — Protection of Students Digital Privacy (D.C. Code §§ 38-831.01–38-831.06)
DE
- 14 Del. C. §§ 8101A–8106A
  - Delaware — Student Data Privacy Protection Act (14 Del. C. §§ 8101A–8106A)
FL
- FL HB 3
  - Florida — HB 3, minors and online access (Fla. Stat. §§501.1736–501.1738)
- Fla. Stat. §1006.1494
  - Florida — student online personal information protection (Fla. Stat. §1006.1494)
- Fla. Stat. §1002.22/.222
  - Florida — K-12 education records (Fla. Stat. §§1002.22, 1002.222)
GA
- O.C.G.A. §§20-2-660 to 20-2-668
  - Georgia — Student Data Privacy, Accessibility, and Transparency Act (O.C.G.A. §§20-2-660 to 20-2-668)
HI
- HRS §§302A-499 to 302A-500
  - Hawaii — Student Online Personal Information Protection (HRS §§302A-499 to 302A-500)
IA
- Iowa Code ch. 715C
  - Iowa — personal information security breach protection (Iowa Code ch. 715C)
- Iowa Code §279.71
  - Iowa — student online personal information protection (Iowa Code §279.71)
ID
- Idaho Code §33-133
  - Idaho — student data: use and limitations (Idaho Code §33-133)
IL
- ANCRA (325 ILCS 5/4)
  - Illinois — Abused and Neglected Child Reporting Act, persons required to report (325 ILCS 5/4)
- BIPA
  - Illinois — Biometric Information Privacy Act (740 ILCS 14)
- PIPA
  - Illinois — Personal Information Protection Act (815 ILCS 530)
- SOPPA
  - Illinois — Student Online Personal Protection Act (105 ILCS 85)
IN
- Ind. Code §§31-33-5-1 to -5
  - Indiana — duty to report child abuse or neglect (IC 31-33-5)
- Ind. Code §§20-33-7-1 to -5 · §20-19-3-9.4
  - Indiana — student records (IC 20-33-7, IC 20-19-3-9.4)
KS
- K.S.A. 72-6312 to 72-6320
  - Kansas — Student Data Privacy Act (K.S.A. 72-6312 to 72-6320)
- K.S.A. 72-6331 to 72-6334
  - Kansas — Student Online Personal Protection Act (K.S.A. 72-6331 to 72-6334)
KY
- KRS 365.734
  - Kentucky — student data and cloud computing service providers (KRS 365.734)
- KRS 61.931–61.933
  - Kentucky — personal information security and breach investigation (KRS 61.931–61.933)
LA
- La. R.S. 51:1951–1955
  - Louisiana — Personal Online Account Privacy Protection Act (La. R.S. 51:1951–1955)
- La. R.S. 17:3913/3914
  - Louisiana — student information privacy (La. R.S. 17:3913, 17:3914)
MA
- G.L. c. 93H
  - Massachusetts — security breaches (G.L. c. 93H)
MD
- Maryland Kids Code
  - Maryland Age-Appropriate Design Code Act (Md. Code, Com. Law §§14-4801 to 14-4813)
- Maryland Online Data Privacy Act
  - Maryland Online Data Privacy Act (Md. Code, Com. Law §§14-4701 to 14-4714)
- Md. Code, Educ. §4-131
  - Maryland — student data privacy (Md. Code, Educ. §4-131)
ME
- 20-A M.R.S. §§951–953
  - Maine — Student Information Privacy Act (20-A M.R.S. §§951–953)
MI
- Michigan SOPPA
  - Michigan — Student Online Personal Protection Act (MCL 388.1291–388.1295)
MN
- Minn. Stat. §13.32 (educational data) · §13.05, subd. 11
  - Minnesota — educational data and technology providers (Minn. Stat. §13.32, subds. 1, 3, 13–15; §13.05, subd. 11)
- Minn. Stat. §13.055 and §13.08
  - Minnesota — breach of security in government data and civil remedies (Minn. Stat. §13.055; §13.08)
MO
- RSMo 162.1475, 407.1500
  - Missouri — data breach notification (RSMo 162.1475 and 407.1500)
- RSMo 161.096
  - Missouri — student data accessibility, transparency and accountability (RSMo 161.096)
MS
- Miss. Code §§45-38-1 to 45-38-13
  - Mississippi — Walker Montgomery Protecting Children Online Act (Miss. Code §§45-38-1 to 45-38-13)
- Mississippi student data — research note
MT
- MCDPA
  - Montana Consumer Data Privacy Act (MCA 30-14-2801 to 30-14-2820)
NC
- N.C.G.S. §115C-401.2 · §115C-402.5
  - North Carolina — student online protection (N.C.G.S. §§115C-401.2, 115C-402.5)
ND
- N.D.C.C. §15.1-07-25.3
  - North Dakota — protection of student data; school district policy (N.D.C.C. §15.1-07-25.3)
NE
- Neb. Rev. Stat. §§79-2,153 to 79-2,155
  - Nebraska — Student Online Personal Protection Act (Neb. Rev. Stat. §§79-2,153 to 79-2,155)
NH
- RSA 189:65 to 189:68-a
  - New Hampshire — student and teacher information protection and privacy (RSA 189:65 to 189:68-a)
NJ
- N.J.A.C. 6A:32-7 · 6A:32-13
  - New Jersey — student records and remote instruction (N.J.A.C. 6A:32-7, 6A:32-13)
NM
- NMSA 1978, §§57-12C-1 to 57-12C-12
  - New Mexico — Data Breach Notification Act (NMSA 1978, §§57-12C-1 to 57-12C-12)
- New Mexico student data privacy (research note)
NV
- NRS 388.267–388.278
  - Nevada — privacy of data concerning pupils: duties of state and local entities (NRS 388.267 to 388.278)
- NRS 388.281–388.296
  - Nevada — school service providers (NRS 388.281 to 388.296)
NY
- NY S.9051-B
  - New York — S.9051-B / A.10379-C: unsafe AI companion features for minors (bill text)
- NY A.9190 / S.10133
  - New York — A.9190 / S.10133: artificial intelligence prohibited in classrooms before ninth grade (bill text)
- N.Y. Gen. Bus. Law Art. 47
  - New York — General Business Law Article 47 (artificial intelligence companion models)
- local
  - NYC
- 8 NYCRR Part 121
  - New York — 8 NYCRR Part 121 (data privacy and security in educational agencies)
OH
- Ohio Rev. Code §§3319.325–3319.327
  - Ohio — technology providers and school-issued device monitoring (R.C. §§3319.325–3319.327)
OK
- 70 O.S. §3-168 · §24-114
  - Oklahoma — Student DATA Act and student records (70 O.S. §§3-168, 24-114)
OR
- OCPA
  - Oregon Consumer Privacy Act (ORS 646A.570 to 646A.589)
PA
- 73 P.S. §2301 et seq.
  - Pennsylvania — Breach of Personal Information Notification Act (73 P.S. §2301 et seq.)
PR
- PR Ley 111-2005
  - Ley 111-2005 — Información al Ciudadano sobre la Seguridad de Bancos de Información
- PR Ley 185-2024
  - Ley 185-2024 — Protección de la Privacidad Cibernética de los Niños y Jóvenes
- PR Ley 40-2024
  - Ley 40-2024 — Ciberseguridad del Gobierno de Puerto Rico (alcance y deberes de proveedores)
- PR Ley 85-2018 Art. 1.05
  - Ley 85-2018 — Expedientes escolares (extracto de la Ley de Reforma Educativa)
RI
- R.I. Gen. Laws § 16-104-1
  - Rhode Island — student data-cloud computing (R.I. Gen. Laws § 16-104-1)
- R.I. Gen. Laws ch. 16-103
  - Rhode Island — Student Social Media Privacy (R.I. Gen. Laws §§ 16-103-1 to 16-103-6)
SC
- S.C. Code §59-1-490
  - South Carolina — data use and governance policy (S.C. Code §59-1-490)
SD
- SDCL 22-40-19 to 22-40-26
  - South Dakota — notice of breach of system security (SDCL 22-40-19 to 22-40-26)
- SDCL 13-3-51 to 13-3-51.6
  - South Dakota — student data reporting and privacy of records (SDCL 13-3-51 to 13-3-51.6)
TN
- Tenn. Code Ann. §§49-1-701 to 49-1-708
  - Tennessee — Data Accessibility, Transparency and Accountability Act (Tenn. Code Ann. §§49-1-701 to 49-1-708)
TX
- CUBI
  - Texas — capture or use of biometric identifier (Tex. Bus. & Com. Code §503.001)
- Tex. Educ. Code §32.151
  - Texas — student information protection (Tex. Educ. Code §§32.151–32.157)
- Tex. Educ. Code §11.175
  - Texas — school cybersecurity (Tex. Educ. Code §11.175)
- SCOPE Act
  - Texas — Securing Children Online through Parental Empowerment Act (Tex. Bus. & Com. Code ch. 509)
- TDPSA
  - Texas — Data Privacy and Security Act (Tex. Bus. & Com. Code ch. 541)
- TRAIGA
  - Texas — Responsible Artificial Intelligence Governance Act (Tex. Bus. & Com. Code ch. 551, 552)
UT
- Utah Code 53E-9 Part 3
  - Utah — Student Data Protection (Utah Code §§53E-9-301 to 53E-9-311)
VA
- Va. Code §22.1-289.01
  - Virginia — school service providers (Va. Code §22.1-289.01)
- Va. Code §§22.1-287, 22.1-79.3
  - Virginia — scholastic records and school surveys (Va. Code §§22.1-287, 22.1-79.3)
VT
- 9 V.S.A. §§ 2443–2443f
  - Vermont — Student Privacy (9 V.S.A. §§ 2443–2443f)
WA
- RCW 19.375
  - Washington — biometric identifiers (RCW 19.375)
- MHMD
  - Washington My Health My Data Act (RCW 19.373)
WI
- Wis. Stat. §48.981(2), (3)(a)
  - Wisconsin — persons required to report child abuse or neglect (Wis. Stat. §48.981(2), (3)(a))
- Wis. Stat. §118.125
  - Wisconsin — pupil records (Wis. Stat. §118.125)
WV
- W. Va. Code §18-2-5h
  - West Virginia — student data (W. Va. Code §18-2-5h)
WY
- W.S. 40-12-501 and 40-12-502
  - Wyoming — computer security breach notice (W.S. 40-12-501, 40-12-502; 6-3-901(b))
- W.S. 21-2-202(a)(xxxiv), (xxxvii); 21-3-110(a)(xxxv)
  - Wyoming — student data privacy and security (W.S. 21-2-202(a)(xxxiv), (xxxvii); 21-3-110(a)(xxxv))