Articles

USED Ramps Up PPRA Enforcement

Student Privacy USED Ramps Up PPRA Enforcement USED found a Massachusetts district violated the law and opened three new investigations. By Jess Arciniega, Amelia Vance, and Morgan Sexton · September 2026 · 9 min read Table of Contents PPRA OverviewBurlingtonWashington, Colorado & MinnesotaDOJ & USED collaborationWhat Comes Next? On July 28 and 29, 2026, the U.S. Department of Education’s (USED) Student Privacy Policy Office (SPPO) opened investigations into Bethel School District in Washington State, Denver Public Schools in Colorado, and the Minnesota Department of Education, for allegedly violating the Protection of Pupil Rights Amendment (PPRA). USED also announced it had […]

USED Ramps Up PPRA Enforcement Read More »

COPPA 2.0 AINS Brings House Closer to Senate-Approved Language

COPPA 2.0 AINS Brings House Closer to Senate-Approved Language March 27, 2026 Jessica Arciniega, Morgan Sexton, and Amelia Vance       CC BY-NC 4.0 On March 5, the House Committee on Energy and Commerce held a full committee markup that focused on child privacy and online safety legislation, advancing the Kids Internet and Digital Safety (KIDS) Act, Sammy’s Law, and App Store Accountability Act out of committee. But what didn’t happen at the markup may be an even bigger step towards strengthening protections for children online.  The Children and Teens’ Online Privacy Protection Act (COPPA 2.0) was on the

COPPA 2.0 AINS Brings House Closer to Senate-Approved Language Read More »

Understanding FERPA’s Enforcement Process

Understanding FERPA’s Enforcement Process January 30, 2026 Katherine Kalpos, Morgan Sexton, and Amelia Vance   CC BY-NC 4.0 On January 28, 2026, the U.S. Department of Education (USED) announced that it has found the California Department of Education (CDE) in violation of FERPA “for policies that pressure school officials to conceal information about students’ ‘gender identity.'” As far as PIPC is aware, this is the first time USED has issued a written notice of findings that has progressed to this stage in the FERPA enforcement process—making this an appropriate moment to explain what could come next. Where We Are in

Understanding FERPA’s Enforcement Process Read More »

Feeding the Machine?: What the Updated COPPA Rule Says About Using Children’s Data to Train Algorithms

Feeding the Machine?: What the Updated COPPA Rule Says About Using Children’s Data to Train Algorithms December 4, 2025 Jessica Arciniega, Morgan Sexton, and Amelia Vance       CC BY-NC 4.0 When your 8-year-old plays their favorite mobile game or uses an educational app to practice math, they’re not just learning or having fun: they’re also generating valuable data. Every click, swipe, and answer creates information about how children think, learn, and behave online. Until recently, many companies were operating under the belief that they could use this data to train artificial intelligence (AI) systems with few restrictions. The

Feeding the Machine?: What the Updated COPPA Rule Says About Using Children’s Data to Train Algorithms Read More »

AI Changes Everything: Why Student Data Review Can’t Wait Another Semester

AI Changes Everything: Why Student Data Review Can’t Wait Another Semester October 15, 2025 Jessica Arciniega, Katherine Kalpos, Morgan Sexton, and Amelia Vance       CC BY-NC 4.0 As schools embrace the potential of AI, a critical question demands attention: How do sophisticated AI models alter what it means to protect student data? For starters, it underscores the need for schools to reassess the data they collect from students and the duration for which they retain it.  AI makes students’ sensitive information more vulnerable than ever before. Earlier this month, the Texas Attorney General filed a lawsuit against edtech

AI Changes Everything: Why Student Data Review Can’t Wait Another Semester Read More »

New COPPA Case: What a Recent FTC Amicus Brief Does–and Does Not–Change for Schools

New COPPA Case: What a Recent FTC Amicus Brief Does–and Does Not–Change for Schools September 3, 2025 Jessica Arciniega, Morgan Sexton, and Amelia Vance       CC BY-NC 4.0 Introduction On August 13, the FTC filed an amicus brief in a lawsuit against edtech vendor IXL Learning (Shanahan v. IXL Learning Inc., 3:24-cv-02724, (N.D. Cal.)). Since then, there has been speculation that the Commission’s interpretations of the Children’s Online Privacy Protection Act (COPPA), as outlined in the brief, somehow change existing COPPA obligations regarding schools and edtech vendors. This blog outlines exactly what this case is about, the FTC’s

New COPPA Case: What a Recent FTC Amicus Brief Does–and Does Not–Change for Schools Read More »

Senate Commerce Advances COPPA 2.0, With Notable Changes

Senate Commerce Advances COPPA 2.0, With Notable Changes July 15, 2025 Jessica Arciniega, Morgan Sexton, and Amelia Vance       CC BY-NC 4.0 On June 25th, the Children and Teens’ Online Privacy Protection Act (COPPA 2.0) was favorably reported out of the U.S. Senate Committee on Commerce, Science, and Transportation. Recap: What is COPPA 2.0?  COPPA 2.0 is a bill that seeks to update and strengthen safeguards in the Children’s Online Privacy Protection Act (COPPA), a federal law enacted in 1998 that regulates how commercial operators can collect personal information from children under 13 (see these resources for more

Senate Commerce Advances COPPA 2.0, With Notable Changes Read More »

Fixing FERPA: Adding Cybersecurity Requirements

Fixing FERPA: Adding Cybersecurity Requirements July 3, 2025 Jessica Arciniega, Morgan Sexton, and Amelia Vance   CC BY-NC 4.0 The Family Educational Rights and Privacy Act (FERPA) governs how schools handle everything from report cards to sensitive psychological evaluations. Yet this cornerstone of student privacy law was written in 1974—nearly three decades before most Americans had ever heard of the internet, and long before anyone imagined that a single cyberattack could expose the intimate details of millions of students’ lives. The result? A massive gap between the digital threats students face and the legal protections designed to shield them. Today,

Fixing FERPA: Adding Cybersecurity Requirements Read More »

Supreme Court Upholds Age Verification: A Game-Changer for Child Online Safety Laws

Supreme Court Upholds Age Verification: A Game-Changer for Child Online Safety Laws July 1, 2025 Jessica Arciniega, Morgan Sexton, & Amelia Vance   CC BY-NC 4.0 Introduction Last Friday, the U.S. Supreme Court issued a major decision in Free Speech Coalition v. Paxton, upholding Texas’s law requiring adult websites to verify users’ ages before allowing access. While this case specifically addressed pornographic content, the ruling’s implications likely extend far beyond adult websites—potentially reshaping how courts evaluate the dozens of state laws designed to protect children online that have repeatedly been blocked by federal judges over the past several years. TLDR:

Supreme Court Upholds Age Verification: A Game-Changer for Child Online Safety Laws Read More »