Student Online Personal Protection Act Summary

• Prohibits educational technology operators from engaging in targeted advertising based on student data or using student information to build profiles for purposes outside K-12 education.

• Bans the sale or rental of student information and restricts disclosure of covered information (personally identifiable data) except for specific purposes including school operations, legal compliance, court orders, and safety concerns.

• Requires operators to implement reasonable security procedures, delete student data upon school request, and publicly disclose their data collection and use practices through terms of service or privacy policies.

• Allows permissible uses including adaptive learning, customized student learning, legitimate research, and recommendations for educational content or services not influenced by third-party payment.

• Violations constitute unlawful practices enforceable by the Illinois Attorney General under the Consumer Fraud and Deceptive Business Practices Act.