Student data privacy laws, contacts, and resources for Ohio. Browse all states for more complete ecosystem guides.
FERPA, COPPA, CIPA
O.R.C. § 3319.321; SB 29 (O.R.C. §§ 3319.325, 3319.326, 3319.327)
Annual notice for device monitoring; 72-hour notice for specific access; mandatory destruction of records within 90 days of contract end.
Annual notice for device monitoring; 72-hour notice for specific access; mandatory destruction of records within 90 days of contract end.
SB 29 limits electronic monitoring; all public schools must adopt board-approved AI policies by mid-2026; state model policy due end of 2025. Mandatory AI policies.
Need help with custom terms or Exhibit H? Learn21 handles DPA negotiation for OH districts through the TEC Student Data Privacy Alliance.
ABYA covers standard agreements. Learn21 covers custom terms and negotiation. Different tools for different needs.
Contact Learn21 →Every state has a public records law, the Ohio equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist, and being able to verify them, is the first step in holding districts accountable.
Search vendor and product DPAs by company, product, or district from the SDPC registry.
Districts that go from single-digit to 90%+ compliance do it by building the right infrastructure: standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance training course to build your district's compliance readiness.
Start training →