Student data privacy laws, contacts, and resources for Oregon. Browse all states for more complete ecosystem guides.
FERPA, PPRA, COPPA, CIPA
ORS 336.184; ORS 339.356
District Information Security Officer; Records Officer (ORS 192.311).
District Information Security Officer (ORS 336.184); Records Officer (ORS 192.311).
Prohibits targeted advertising; vendor data disposal within 60 days of termination; annual retirement audit for EdTech products.
DPA template available (e.g. NDPA or state-specific).
Developing Policy and Protocols for GenAI in K-12; focuses on instructional integration, ethical risks, and mitigating bias.
Every state has a public records law, the Oregon equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist, and being able to verify them, is the first step in holding districts accountable.
Visit Oregon Department of Education (ODE) →Search vendor and product DPAs by company, product, or district from the SDPC registry.
Districts that go from single-digit to 90%+ compliance do it by building the right infrastructure: standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance training course to build your district's compliance readiness.
Start training →