California revamped its data security statutes for education last year. California Education Code Section 49073.1 requires education contractors to:
• a statement that pupil records continue to be the property of and under the control of the local educational agency;
• a description of the means by which pupils may retain possession and control of their own pupil-generated content, if applicable, including options by which a pupil may transfer pupil-generated content to a personal…