Student data privacy laws, contacts, and resources for New York. Browse all states for more complete ecosystem guides.
FERPA, PPRA, COPPA
8 NYCRR 121.8; SB 6356; AB A6787D; State Tech Law § 106-B
Data privacy and security; State Chief Privacy Officer; District Data Privacy Officer.
State Chief Privacy Officer; District Data Privacy Officer (8 NYCRR 121.8).
Mandatory Data Privacy and Security Plans for vendors; Parents' Bill of Rights; ban on biometric ID tech; data minimization restricted to strictly necessary elements.
DPA template available (e.g. NDPA or state-specific).
NYSED AI Guidance Framework (2024) - human-in-the-loop and bias audits; NYC Local Law 144 (automated employment); state agency AI inventory. LOADinG Act proposed.
Need help with custom terms or Exhibit H? NY State Dept of Education + 12 RICs handles DPA negotiation for NY districts through the TEC Student Data Privacy Alliance.
ABYA covers standard agreements. NY State Dept of Education + 12 RICs covers custom terms and negotiation. Different tools for different needs.
Contact NY State Dept of Education + 12 RICs →Every state has a public records law, the New York equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist, and being able to verify them, is the first step in holding districts accountable.
Visit New York State Education Department (NYSED) →Search vendor and product DPAs by company, product, or district from the SDPC registry.
Districts that go from single-digit to 90%+ compliance do it by building the right infrastructure: standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance training course to build your district's compliance readiness.
Start training →