Ecosystems/California

California

California Department of Education (CDE)

SDPC Member

Student data privacy laws, contacts, and resources for California. See Utah for a complete district-by-district guide.

โš–๏ธ Federal laws

FERPA, PPRA, COPPA

๐Ÿ“œ State laws

SOPIPA

Bus. & Prof. Code ยง 22584-22585

Student Online Personal Information Protection Act.

Third-Party Contracts

AB 1584 (CA Educ. Code ยง 49073.1)

Education records and third-party contracts.

Social Media Privacy

AB 1442 (CA Educ. Code ยง 49073.6)

Social media privacy.

Social Security Numbers

AB 2097 (CA Educ. Code ยง 49076.7)

Superintendent assigns student IDs.

CCPA/CPRA

Cal. Civ. Code ยง 1798.100

Consumer privacy.

CA AI Transparency Act

SB 942/AB 853 (Cal. Bus. & Prof. Code ยง 22757)

AI detection and disclosures.

๐Ÿ‘ฅ Required roles

CDE Chief Privacy Officer; Records Officer (Gov. Code ยง 12270); Superintendent assigns student IDs (AB 2097).

โœ… Compliance

Strict data minimization; mandatory deletion on request; vendors barred from non-educational data use; risk assessments for sensitive info; security procedures for covered info.

๐Ÿ“„ DPA

DPA template available (e.g. NDPA or state-specific).

๐Ÿค– AI governance

Executive Order N-12-23; CDE GenAI guidance; AB 2013 (training data transparency); SB 942 requires AI detection/disclosures.

๐Ÿ“‚ Public records access

Every state has a public records law โ€” the California equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.

Records access is privacy in action. Knowing what agreements exist โ€” and being able to verify them โ€” is the first step in holding districts accountable.

Visit California Department of Education (CDE) โ†’

If your state wants what Utah has...

Utah went from 8% to 92% compliance across 150+ LEAs by building the right infrastructure โ€” standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.

Ready to validate your knowledge?

Take the ABYA Privacy & AI Governance Certification to demonstrate your district's compliance readiness.

Start certification โ†’