2017. The Feds Have Weakened Student Data Privacy. Here's what groups want the states to do: – InfoHive

The Electronic Privacy Information Center (EPIC.org) wants states to pass bills that:

No Targeted Ads. prohibit K-12 mobile and online service operators from using student information to target advertisements to students;
No Profiling Students. prohibit online service providers from creating K-12 student profiles for commercial purposes;
No Selling Info. forbid companies from selling student information;
All Students (K-16) extend protection to all students, including college and post-graduate students;
Enforcement. strong enforcement mechanisms, including a private right of action against private companies that abuse student data;
Limit Data Collection. limiting the type of data that companies and schools collect (e.g., Social Security numbers, biometric information, social media information);
Transparency. publishing the types of information companies and schools collect, the purposes for which the information will be used, and the security practices in place;
Data Retention Policies. data retention limitations that require companies to delete student data after the data is no longer needed;
Student and Parental Control over Info. permitting students to delete & correct certain student information;
Notification. data breach notification; and
Schools Can’t Disclose Students. prohibiting schools from disclosing “directory information,” including student name and home address.