Legislative Brief: Student Online Personal Protection Act (SOPPA)

In Illinois, the Student Online Personal Protection Act (SOPPA) provides additional guarantees that student data is protected when collected by educational technology companies, and that data is used for beneficial purposes only (105 ILCS 85).

This legislative brief summarizes the law and provides an overview of the law’s requirements for K-12 schools, including:

• Implementing and maintaining reasonable data security practices
• Entering into written agreements with all K-12 service providers who collect student data
• Publicly posting data privacy agreements and the process for inspecting, reviewing, and correcting student information