Education Law §2-d — Student data privacy and contractor safeguards

Educational agencies must publish a parent privacy bill of rights, disclose third-party data contracts, safeguard student information and prohibit its sale or marketing use.

Privacy / cybersecurity

Jurisdiction: New York · State / DC
Policy status: Effective
Implementation phase: Current
Requirement: Required
Grades: All K-12
Audience: Multiple
Learning evidence: No student-learning claim
Instrument: Statute / enacted law

Dates & implementation

Ongoing statutory requirements for covered educational agencies and contracts; current online revision July 5, 2024.

A legal effective date can precede school implementation. This record documents policy intent or requirements; it does not independently confirm delivery in every classroom.

Funding & support

Policy-specific support

This section establishes compliance requirements and penalties, not an implementation grant.

Read funding source

Evidence & source location

Education Law §2-d(3), (4)(f), (5)–(6)

New York Education Law §2-dhttps://www.nysenate.gov/legislation/laws/EDN/2-D ↗

Reviewed §2-d(3)–(5). Includes purposes, subcontractors, retention/end-of-contract handling and security disclosures. Source reflects July 5, 2024 revision; original effective date not inferred from revision date.

Review history

Reviewed against official sources

Source availability checked Oct 4, 2026: Source reopened. This is separate from verification of the policy claim below.

Source review date recorded in database: 2026-10-04

2026-10-03 — Carried forward from the source-linked baseline; topic, grade and evidence-type inventory reviewed. Individual source was not re-opened in this update. 2026-10-04 — Substantive source review: Reviewed current Education Law §2-d(3)–(6): privacy bill of rights, contract disclosures, safeguards and sale/marketing restrictions.

Record ID: NY-PRIVACY-2D-001

Suggest a correction to this record