MN SF2219

Establishes student privacy protections for online educational services used by Minnesota K-12 students, including websites, applications, and cloud computing services that are designed and marketed for school purposes.

Prohibits operators of online educational services from engaging in targeted advertising based on student information, creating student profiles for non-educational purposes, or selling student information without consent.

Requires operators to implement reasonable security procedures to protect student information and delete student data within 60 days if a school requests deletion of data under the school's control.

Allows limited disclosures of student information only for educational purposes, legal compliance, safety, or contracted services with strict confidentiality requirements; permits research and adaptive learning uses that do not involve profiling or advertising.

Exempts general audience websites, Internet service providers, software marketplaces, and law enforcement activities from these restrictions, and preserves students' ability to download and maintain their own data.