HI SB2607

Adds new section to Hawaii law prohibiting operators of websites, online services, or applications used for K-12 education from engaging in targeted advertising based on student data or persistent identifiers.

Prohibits operators from selling or renting student information, amassing profiles on students for non-educational purposes, or disclosing covered information except for specific permitted purposes including K-12 school operations, legal compliance, court orders, and contracted third-party services.

Requires operators to implement reasonable security procedures to protect student data and delete student information upon request from K-12 schools unless the student or parent consents to retention.

Permits operators to use de-identified student information to improve educational products, share non-identifiable information for developing educational applications, and make educational recommendations to students not determined by third-party payment.

Exempts general audience websites, internet service providers, app stores, interactive computer service providers, and law enforcement activities from the restrictions.