EdLaw
Organizational
Instruments owned by standards bodies, associations, or industry schemes (W3C, ISO, IEEE, …) — typically voluntary. One folder per body, then one legal root folder per instrument, e.g. w3c/wcag/.
Contents
- aicpa — American Institute of Certified Public Accountants
- aicpa/soc2/ — SOC 2 (System and Organization Controls 2): the Trust Services Criteria, TSP section 100 (2017, revised points of focus 2022), in full (restricted: not on the public site)
- etsi — European Telecommunications Standards Institute
- etsi/en-301-549/ — EN 301 549 V4.1.1 (2026-09), Accessibility requirements for ICT products and services, clauses 1–14 (restricted: not on the public site)
- etsi/en-301-549-v3-2-1/ — EN 301 549 V3.2.1 (2021-03), the version the Official Journal cites for the Web Accessibility Directive, clauses 1–14 (restricted: not on the public site)
- fpf — Future of Privacy Forum
- fpf/student-privacy-pledge/ — Student Privacy Pledge (superseded — retired 2025)
- nafai — National Academy for AI Instruction
- nafai/ai-safety-privacy-standard/ — AI Safety & Privacy Standard for Schools (AFT/UFT–Microsoft MOA, v1.0 Sept 2026)
- sdpc — Student Data Privacy Consortium
- sdpc/ndpa/ — National Data Privacy Agreement
- sdpc/state-terms/ — state-specific NDPA terms (Exhibit G), every populated one published: IL · CA incl. AI Addendum · FL · MI · UT · WA · MO · AZ · MA · AR · WI (WSDPA) · MT (whole agreement) · VA · AL, plus the current multi-state NDPA exhibits for ME · NE · NH · RI · VT · TN · IA · NJ · NY · OH (ME/NE/NH/RI also in their older whole-agreement shape). UT is the only one reaching employee data (and names SOC 2/SOC 3 as satisfying its audit right); MO has a 72-hour breach clock reaching a student's family member; TN bans collecting biometric, facial-expression, EEG, heart-rate, posture and eye-tracking data (no consent exception); NH extends every duty to teacher data and requires its 23 security controls or a named certification such as SOC 2 Type 2; OH bars school-device camera/microphone/location monitoring unless the LEA confirms in writing; SC/PA/OR templates verified unpopulated
- w3c — World Wide Web Consortium
- w3c/wcag/ — Web Content Accessibility Guidelines 2.0 (2008), 2.1 (2018 edition, as the ADA Title II rule cites) and 2.2 (2024)