MN SF710

Public postsecondary institutions must prohibit public disclosure of students' email addresses, physical addresses, telephone numbers, and ID card photographs in their directory information policies

Institutions must maintain documentation of directory information requests involving 100 or more students for four years, and students may review records of requests for their information

Postsecondary institutions (public and private) cannot collect student location data without consent, and cannot require consent as a condition of enrollment, financial aid, housing, dining contracts, or campus Wi-Fi access

Within 30 days of each school year's start, institutions must notify students of any technology provider contracts collecting location data, and must publish complete copies of these contracts on their websites

Technology providers must establish written security procedures for location data, cannot sell or use the data for commercial purposes, and must destroy or return all location data within 30 days of contract expiration (effective July 1, 2025)