CA AB1971

Prohibits national assessment providers from selling personal information collected for administering standardized tests, except when incident to a business acquisition or with express consent to colleges, universities, financial aid agencies, government agencies, and educational opportunity organizations.

Prohibits disclosure of covered information to third parties including social media providers through tracking technologies, with limited exceptions for legal compliance, judicial process, personal safety, and service providers under strict contractual restrictions.

Allows disclosures for standardized test purposes (admission, course credit, placement, scholarships) only with express consent from the test subject or parent/guardian, and requires recipients to agree not to further disclose without consent.

Permits other disclosures to state/local educational agencies, parents or legal guardians of minors, and for legitimate research required by state or federal law.

Requires national assessment providers to implement reasonable security procedures to protect covered information from unauthorized access, use, modification, or disclosure, with this chapter providing greater privacy protections than the California Consumer Privacy Act where conflicts exist.