SB0229 - Student Online Personal Protection Act

• Establishes protections for student data collected by educational technology companies operating websites, services, or applications used for K-12 school purposes.

• Prohibits operators from engaging in targeted advertising based on student data, selling or renting student information, or creating profiles about students except for K-12 school purposes.

• Requires operators to implement reasonable security procedures, delete student data upon school request, and publicly disclose their data collection and use practices through privacy policies or terms of service.

• Allows limited data use and disclosure for legitimate school purposes, legal compliance, safety, research, and to third-party service providers under strict contractual restrictions.

• Violations constitute unlawful practices enforceable by the Illinois Attorney General under the Consumer Fraud and Deceptive Business Practices Act.