Privacy Bills by State Chart
| State | Bill | Description |
| Arizona | HB 2088 (2016)
|
Survey notification, consent & transparency |
| SB 1314 (2017)
|
SOPIPA (Student Online Personal Information Protection Act); opt-out of technology | |
| Arkansas | HB 1241 (2015)
|
Restricts disclosure of student data to the US Department of Education; (PARCC delay, but not included in this analysis) |
| HB 1961 (2015) | SOPIPA (Student Online Personal Information Protection Act) | |
| HB 1793 (2017) | Creates a panel to study statewide longitudinal data systems (SLDS); establishes Chief Privacy Officer (CPO) & Chief Data Officer (CDO) | |
| California | AB 1584 (2014) | Contract requirements for cloud-based data storage services |
| SB 1177 (2014) | SOPIPA (Student Online Personal Information Protection Act) | |
| SB 2799 (2016) | SOPIPA (Student Online Personal Information Protection Act) – preschool & prekindergarten | |
| AB 2097 (2016) | Prohibits collection of Social Security numbers | |
| Colorado | HB 1294 (2014) | Student Data Accessibility, Transparency & Accountability Act |
| HB 1423 (2016) | SOPIPA (Student Online Personal Information Protection Act); contract & on-demand provider requirements | |
| Connecticut | SB 949 (2015) | Development of a statewide longitudinal data system (SLDS); state agency data security & breach in written agreements |
| HB 5469 (2016) | SOPIPA (Student Online Personal Information Protection Act); contractor & operator requirements | |
| HB 7207 (2017) | Delay implementation of CT SOPIPA (Student Online Personal Information Protection Act) | |
| HB 5444 (2018) | Weakens transparency and data deletion of CT SOPIPA (Student Online Personal Information Protection Act) | |
| Delaware | SB 79 (2015) | SOPIPA (Student Online Personal Information Protection Act) |
| District of Columbia | B21-0578 (2016) | SOPIPA (Student Online Personal Information Protection Act); (1-to-1 devices, but not included in this analysis) |
| Florida | SB 188 / HB 195 (2014) | Restricts collection of sensitive information; makes disclosure of Social Security numbers voluntary |
| Georgia | SB 89 (2015) | SOPIPA (Student Online Personal Information Protection Act); Student Data Accessibility, Transparency & Accountability Act |
| Hawaii | SB 2607 (2016) | SOPIPA (Student Online Personal Information Protection Act) |
| Idaho | SB 1372 (2014) | Student Data Accessibility, Transparency & Accountability Act |
| Illinois | 105ILCS 10/2 | Disclosure of student records: permanent vs. temporary |
| HB 3527 (2016) | School social media privacy protections | |
| SB 1796 (2017) | SOPIPA (Student Online Personal Information Protection Act) | |
| Indiana | HB 1003 (2014) | Statewide longitudinal data systems (SLDS) data accessibility, restrictions, & oversight |
| Iowa | HF 2354 (2018) | SOPIPA (Student Online Personal Information Protection Act) |
| Kansas | SB 367 (2014) | General student privacy act |
| HB 2008 (2016) | SOPIPA (Student Online Personal Information Protection Act) | |
| Kentucky | HB 232 (2014) | Cloud-computing services requirements |
| Louisiana | HB 1076 (2014)
(originally HB 946) |
Collection & disclosure of personally identifiable information; contract service |
| HB 1283 (2014) | Written agreement transparency & requirements | |
| HB 718 (2015) | Prohibits predictive modeling by contractors | |
| SB 270 (2016) | Requires data sharing for enrollment verification | |
| Maine | LD 59 (2014) | Adds privacy protections to some private schools |
| LD 454/SP 183 (2015) | SOPIPA (Student Online Personal Information Protection Act) | |
| LD 1276 (2015) | Restricts sensitive data collection & dissemination via state assessments | |
| LD 678 (2017) | Student Social Security numbers; collection and deletion | |
| LD 1616 (2017) | Adds permitted disclosures to ME SOPIPA (Student Online Personal Information Protection Act) | |
| Maryland | HB 298 (2015) | SOPIPA (Student Online Personal Information Protection Act) |
| SB 1165 (2017) | Extends the amount of time education and workforce data are linked in the statewide longitudinal data system (SLDS) | |
| HB 568 (2018) | Limits access to student data in the statewide longitudinal data system (SLDS); requires development of security plan | |
| Michigan | SB 33 (2016) | Student data transparency; limits selling student data; gives opt out to certain directory information disclosures |
| SB 510 (2016) | SOPIPA (Student Online Personal Information Protection Act) | |
| Missouri | HB 1490 (2014) | Student Data Accessibility, Transparency & Accountability Act |
| Nebraska | LB 512 (2017) | SOPIPA (Student Online Personal Information Protection Act) |
| Nevada | AB 221 (2015) | Transparency, Security; & Contracted Services |
| SB 463 (2015) | SOPIPA (Student Online Personal Information Protection Act) | |
| New Hampshire | HB 1587 (2014) | Restricts collection of student data for the statewide longitudinal data system (SLDS), & disclosure of student data |
| HB 206 (2015) | AN ACT establishing a committee to study non-academic surveys or questionnaires administered by a public school to its students and relative to non-academic surveys or questionnaires given to students | |
| HB 322 (2015) | Requires development (but not implementation) of security plan | |
| HB 507 (2015) | Protection of teacher personally identifiable information; & classroom video recording | |
| HB 520 (2015) | SOPIPA (Student Online Personal Information Protection Act) | |
| HB 301 (2016) | Establishes a committee to study statewide longitudinal data systems (SLDS) | |
| HB 1497 (2016) | Exception for college entrance exams (ACT/SAT) | |
| HB 1372 (2016) | Allows video & audio recording of students | |
| HB 275 (2017) | Prohibits inclusion of statewide exam results in transcripts without consent | |
| SB 43 (2017) | Non-academic surveys & questionnaires | |
| HB 1551 (2018) | Retention & deletion of Individualized Education Program (IEP) data | |
| HB 1612 (2018) | Strengthens NH SOPIPA (Student Online Personal Information Protection Act); adds security, & digital badges | |
| New York | AB 8556 (2014) | Strengthens NH SOPIPA (Student Online Personal Information Protection Act); adds security, & digital badges |
| North Carolina | SB 815 ( 2014) | Student Data Accessibility, Transparency & Accountability Act |
| HB 632 (2016) | SOPIPA (Student Online Personal Information Protection Act) | |
| North Dakota | SB 2326 (2015) | Statewide longitudinal data system (SLDS) development & oversight; authorized employees who may access student data |
| Ohio | HB 487 (2014) | Statewide data system safeguards |
| Oklahoma | HB 1989 (2013) | Student Data Accessibility, Transparency & Accountability Act |
| Oregon | HB 2655 (2015) | Privacy standards; (exam opt-out, but not included in this analysis) |
| SB 187 (2015) | SOPIPA (Student Online Personal Information Protection Act) | |
| Pennsylvania | HB 1606 (2016) | Student data collection reduction; & establishes a data advisory committee |
| Rhode Island | H 7124 (2014) | Cloud computing services requirements; & social media privacy |
| South Dakota | SB 63 (2014) | Survey requirements & restricts student data disclosure to USED |
| Tennessee | HB 1549 (2014) | Student Data Accessibility, Transparency & Accountability Act |
| SB 1835 (2014) | Prohibits commercial use, & disclosure of student personally identifiable information to the US Department of Education | |
| HB 1931 / SB 1900 (2016) | SOPIPA (Student Online Personal Information Protection Act) | |
| HB2690 / SB2029 (2018) | Mental health screening notification | |
| Texas | HB 4046 (2015) | Student record confidentiality |
| HB 2087 (2017) | SOPIPA (Student Online Personal Information Protection Act) | |
| Utah | HB 68 (2015) | Mandates student privacy study & Chief Privacy Officer (CPO) |
| HB 163 (2015) | Student data breach requirements | |
| HB 358 (2016) | SOPIPA (Student Online Personal Information Protection Act) contracted services requirements; prohibits collection of Social Security numbers | |
| SB 102 (2017) | Create list of authorized employees who may access education records; requires privacy training | |
| SB 163 (2017) | Weakens UT SOPIPA (Student Online Personal Information Protection Act) contracted services requirements; targeted advertising & national assessment provider (ACT/SAT) exceptions | |
| SB 207 (2018) | Amends UT SOPIPA (Student Online Personal Information Protection Act) contracted services requirements; revokes national assessment provider (ACT/SAT) exceptions | |
| Virginia | SB 242 (2014) | Higher education ban on selling student data |
| HB 1334 (2015) | State Department of Education breach notification | |
| HB 1698 (2015) | Restricts surveys & questionnaires | |
| HB 2350 (2015) | Establishes a security plan, group & Chief Privacy Officer (CPO) | |
| HB 1612 (2015) | SOPIPA (Student Online Personal Information Protection Act) | |
| HB 519 (2016) | Expands VA SOPIPA (Student Online Personal Information Protection Act) definitions | |
| HB 749 (2016) | Weakens VA SOPIPA (Student Online Personal Information Protection Act) | |
| HB 750 (2016) | Weakens VA SOPIPA (Student Online Personal Information Protection Act) with a college & career assessment (ACT & SAT) exception | |
| HB 524 (2016) | Confidentiality of student & teacher data held in teacher personnel files | |
| SB 438 (2016) | Higher education social media privacy | |
| SB 951 (2017) | Amends VA SOPIPA (Student Online Personal Information Protection Act) with providing student access to personal information | |
| HB 1 (2018) | Limits disclosure of PII in Freedom of Information requests | |
| Washington State | SB 5419 / HB 1495 (2015) | SOPIPA (Student Online Personal Information Protection Act) |
| West Virginia | HB 4316 (2014) | Student Data Accessibility, Transparency & Accountability Act |
| HB 4261 (2016) | Amends WV Student Accessibility, Transparency, Accountability Act to include state assessments’ (ACT & SAT) use of student data | |
| Wyoming | SF 79 (2014) | Development of a student data security plan & report |
| HB 08 (2017) | Implementation of student privacy & security guidelines |