EdLaw
Kansas — Student Online Personal Protection Act (K.S.A. 72-6331 to 72-6334)
Kansas's SOPIPA-model operator statute, enacted by L. 2016, ch. 57 (effective July 1, as each section's History line records) and amended in 2022 (72-6332). It binds the operator of an "educational online product": no targeted advertising, no profiling outside educational purposes, no sale or rental of student information, disclosure only on enumerated grounds, reasonable security, and deletion at the school district's request. The attorney general or any district attorney enforces it.
Applicability to EdTech
- Who is bound. An "operator" is the operator of an educational online product — an internet website, online service, online application or mobile application "used primarily, and was designed and marketed for, educational purposes" — with actual knowledge of that use and design (72-6332(c), 72-6332(d)(1)). School districts and national assessment providers administering college and career readiness assessments are excluded (72-6332(d)(2)).
- Student information covers information created by the operator, or provided to it by a student, parent or district, in the course of educational use, or gathered through the product's operation (72-6332(h)).
- Service providers may receive student information only under contract terms limiting use to the contracted service, prohibiting onward disclosure and requiring reasonable security (72-6333(a)(4)(E)).
- Deletion within a reasonable period on the school district's request, unless the student or parent asks that the information be kept (72-6333(b)(2)).
Contents
| Document | Covers |
|---|---|
| SOPPA.md | K.S.A. 72-6331 to 72-6334 — citation, definitions, operator prohibitions and exceptions, enforcement |
Key obligations at a glance
- No targeted advertising, no profile-building except for educational purposes, no sale or rental — 72-6333(a)(1)–(3).
- Disclose student information only on the enumerated grounds — 72-6333(a)(4).
- Reasonable security; deletion on the district's request — 72-6333(b).
Enforcement
The attorney general or any district attorney, by action seeking injunctive relief against "any operator in possession of student information" (72-6334).
Licence
The corpus reproduces K.S.A. 72-6331 to 72-6334 verbatim from the Kansas Office of Revisor of Statutes' per-section pages, with each section's History line and "Source or Prior Law" note.
Statute text enacted by a state legislature is outside copyright under the government edicts doctrine. In Georgia v. Public.Resource.Org, Inc., 590 U.S. 255 (2020) (slip opinion, read 2026-10-01), the Supreme Court held: "Under what has been dubbed the government edicts doctrine, officials empowered to speak with the force of law cannot be the authors of—and therefore cannot copyright—the works they create in the course of their official duties." It applied the doctrine to an arm of the legislature as well as to legislators: "Because Georgia’s annotations are authored by an arm of the legislature in the course of its legislative duties, the government edicts doctrine puts them outside the reach of copyright protection."
The statute pages (ksrevisor.gov — 72-6333, read 2026-10-08) carry no copyright notice.
Conditions: none attach to the statute text. The corpus nonetheless names the official source in its Sources section and in each fact document's {.meta} provenance lines, and its Meta section describes what it changed (anchors added, nothing reworded).
Related
- Kansas Student Data Privacy Act — the companion records statute (K.S.A. 72-6312 to 72-6320)
- California SOPIPA — the model
- Nebraska Student Online Personal Protection Act — the neighbouring SOPIPA-model act
- COPPA · FERPA — the federal layer