language: en · status: in-force · last checked: 2026-09-04

Cal. Ed. Code §49073.1 — contracts with third parties for pupil records

California state law (added by AB 1584) governing what a local educational agency's contract with a third party for digital pupil-records services must contain: pupil records remain the property and under the control of the LEA, and the contract must cover data use limits, parental access, security, breach notification, deletion/return, and certification of FERPA compliance. A contract failing the requirements can be rendered void.

Applicability to EdTech

The mirror image of SOPIPA: SOPIPA binds the vendor, §49073.1 binds the district — and therefore drives the contract terms California districts put in front of vendors. Its required clauses are the direct ancestors of the SDPC National Data Privacy Agreement's California exhibit.

Contents

Related

• SOPIPA — the operator-side counterpart
• FERPA — the federal regime whose compliance the contract must certify

Sources

• California Legislative Information — Ed. Code §49073.1

Meta

Built and re-verified mechanically — see tools/us-states: build_ca.py / build_ca.py verify. Do not hand-edit statute text.