Virginia Department of Education (VDOE)
Student data privacy laws, contacts, and resources for Virginia. See Utah for a complete district-by-district guide.
FERPA
HB 1 (VA Code §§ 22.1-287); SB 951; HB 2350 (22.1-20.2)
Chief Data Security Officer (HB 2350).
§§ 59.1-575 et seq.
Consumer data protection.
Chief Data Security Officer (HB 2350).
Incident reporting within 24 hours; mandatory model data security plan; restrictions on facial recognition; parent right to download record copies.
HB 2031 prohibits police facial recognition until 2026; focus on transparency and prevention of algorithmic discrimination. VDOE guidelines on benefits, privacy, and equity.
The TEC Student Data Privacy Alliance provides DPA procurement services for VA districts. Contact TEC to learn about their offerings.
Every state has a public records law — the Virginia equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist — and being able to verify them — is the first step in holding districts accountable.
Utah went from 8% to 92% compliance across 150+ LEAs by building the right infrastructure — standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance Certification to demonstrate your district's compliance readiness.
Start certification →