Student data privacy laws, contacts, and resources for California. Browse all states for more complete ecosystem guides.
FERPA, PPRA, COPPA
Bus. & Prof. Code § 22584-22585
Student Online Personal Information Protection Act.
AB 1584 (CA Educ. Code § 49073.1)
Education records and third-party contracts.
AB 1442 (CA Educ. Code § 49073.6)
Social media privacy.
AB 2097 (CA Educ. Code § 49076.7)
Superintendent assigns student IDs.
Cal. Civ. Code § 1798.100
Consumer privacy.
SB 942/AB 853 (Cal. Bus. & Prof. Code § 22757)
AI detection and disclosures.
CDE Chief Privacy Officer; Records Officer (Gov. Code § 12270); Superintendent assigns student IDs (AB 2097).
Strict data minimization; mandatory deletion on request; vendors barred from non-educational data use; risk assessments for sensitive info; security procedures for covered info.
DPA template available (e.g. NDPA or state-specific).
Executive Order N-12-23; CDE GenAI guidance; AB 2013 (training data transparency); SB 942 requires AI detection/disclosures.
Every state has a public records law, the California equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist, and being able to verify them, is the first step in holding districts accountable.
Visit California Department of Education (CDE) →Search vendor and product DPAs by company, product, or district from the SDPC registry.
Districts that go from single-digit to 90%+ compliance do it by building the right infrastructure: standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance training course to build your district's compliance readiness.
Start training →