SB 1177 Summary

• Prohibits operators of websites, online services, applications, and mobile applications designed for K-12 school purposes from engaging in targeted advertising to students using their personal information or from targeting advertising on other platforms based on student data collected.

• Restricts operators from using student information to create profiles except for K-12 school purposes and prohibits selling student information, with exceptions only for mergers or acquisitions where protections continue.

• Requires operators to implement reasonable security procedures to protect student information from unauthorized access and to delete student data upon request by schools or districts.

• Allows disclosure of covered information only for K-12 school purposes, legal compliance, judicial process, user safety, or to service providers under strict contractual restrictions.

• Permits use of deidentified and aggregated student data for improving educational products and research purposes conducted under direction of schools or educational agencies.