SB425 Summary: K-12 Student Privacy and Cloud Computing Act

• Prohibits cloud computing service providers from using student data for secondary commercial purposes, including online behavioral advertising, profiling for third-party benefit, or selling data for profit.

• Allows cloud computing services to process and monitor student data only to provide services to educational institutions and maintain service integrity.

• Requires cloud computing service providers to certify in writing to educational institutions that they will comply with the act's restrictions on student data use.

• Defines student data broadly to include names, email addresses, postal addresses, phone numbers, electronic messages, documents, unique identifiers, and metadata created or provided by students using the service.

• Authorizes the State Board of Education to promulgate implementing rules and regulations; takes effect on the first day of the third month following passage and approval.