Skip To Main Content

Data Privacy Regulations

Regulations Guiding Student Data

Children's Internet Protection Act (CIPA)

CIPA addresses concerns about children's access to inappropriate content on the internet.  CIPA imposes requirements on schools and districts that receive discounts for internet connections through the E-rate program, to include internet safety policies and providing minors with education on appropriate online behavior.  Learn more information about CIPA.

Family Educational Rights and Privacy Act (FERPA)

FERPA is a federal law protecting the privacy of student educational records.  FERPA gives parents certain rights with respect to these records.  School districts are allowed to disclose certain "directory information" when the disclosure is for an educational purpose.  Directory Information might include name, address, phone number, date and place of birth, honors and awards, and attendance.  The school district must provide transparency about which programs are being used.  

Learn more about FERPA.

Children's Online Privacy Protection Act (COPPA)

COPPA puts requirements on website and online service operators (including mobile apps) that collect, use or disclose data from children under 13 years of age.  These requirements include posting privacy policies and obtaining parental consent before collecting personal information from a child.  It reuires that parents have access to their child's personal information to allow them to prohibit or delete this information.

Learn more about COPPA.

Student Data Transparency and Security Act (SDTSA)

Colorado's SDTSA act adds to existing laws pertaining to student data privacy and security.  The purpose of this law is to increase transparency and security of all Student Personally Identifiable Information (PII) that is collected and maintained.  Please go to this CDE link for more information.