What is SOPPA?
SOPPA is a state law that governs and protects the privacy and security of student data when it is shared with and collected by educational technology companies. SOPPA regulates these companies who provide web-based sites, services, online and mobile applications that are used primarily for K to 12 purposes.
Currently, SOPPA provides various prohibitions and responsibilities on these companies. The law has important provisions which prevent companies from engaging in targeted advertising to students, amassing a profile on students, selling or renting student information, or using student information except in limited ways. Additionally, companies must meet certain security requirements when storing student data, delete student data when requested by the district, and maintain a public privacy policy.
SOPPA also places responsibilities on school districts, including requiring data sharing agreements with many of these companies. SOPPA also gives parents certain rights when it comes to their children's data.