Student Data Privacy

Student data privacy refers to the protection of personally identifiable information and educational records collected from students, including their academic performance, behavioral records, and family information. Educational institutions and edtech companies must comply with laws like FERPA in the US and GDPR in Europe, which establish strict requirements for how student data can be collected, stored, shared, and deleted. For enterprise AI governance, this matters because machine learning systems increasingly process student data for personalized learning, predictive analytics, and administrative functions, creating significant compliance risks if not properly managed with data minimization, consent frameworks, and regular audits.

1 item

Corporate PolicyUS2026-09-09

Microsoft's Contractual AI Safeguards for Schools Set a Vendor Governance Template

Microsoft has agreed to ten contractually enforceable AI safety and privacy commitments with the American Federation of Teachers and its New York City affiliate, covering student and educator data used in school AI deployments. The commitments include prohibitions on training AI models on student data, limits on data collection, plain-language family disclosures, bans on AI companion features, and mandatory human review for high-risk decisions. School districts can opt into these terms within existing contracts starting in November 2025.

Microsoft student data privacy AI in education contractual AI governance data minimization human oversight vendor due diligence