Educational institutions hold detailed records on minors while relying heavily on third-party edtech vendors, which is where most student privacy incidents originate. This hub covers both.

Employee Privacy

Wisconsin Stat. 995.55: Personal Internet Accounts and Employers, Schools and Landlords

November 2, 2026

Wisconsin's Internet privacy protection statute, created by 2013 Wisconsin Act 208, applies one access rule to employers, educational institutions and landlords. It bars conditioning a job, admission or tenancy on handing over or displaying a personal Internet account, lists what stays permitted, and routes retaliation claims through the Fair Employment Act process.

Read more →
FERPA

Directory Information, the Opt-Out, and What the PPRA Adds

September 1, 2026

Directory information is the one category of student record a school may release without consent, and the trade is a public notice plus a window to opt out. The PPRA is a separate statute covering surveys, physical examinations and the collection of student information for marketing, with its own annual notice and its own opt-out.

Read more →
FERPA

How an EdTech Vendor Becomes a School Official Under FERPA

September 1, 2026

FERPA's default is written parental consent before a school discloses personally identifiable information from education records. The school official exception displaces that default for outsourced vendors, but only where four conditions in 34 CFR 99.31(a)(1) and 99.33 are all met, including a direct control requirement the Department added in 2008 to reach IT and web services.

Read more →
COPPA

COPPA: When a Service Is Child-Directed and What Follows

August 12, 2026

COPPA turns on two questions that decide everything downstream: whether a service is directed to children under 13, and whether the operator has actual knowledge it is collecting from one. This guide covers the multi-factor test, what counts as personal information, the approved consent methods, and the state laws now layered on top.

Read more →