Student Online Personal Protection Act (SOPPA)

Regulates and guarantees that student data collection and use by schools, the Illinois State Bord of Education, and third-party vendors is protected when collected by educational technology companies, and that data is used for beneficial purposes only. Third-party vendors must enter into Data Privacy Agreements (DPA) with each district they work with. These agreements outline what data is stored, how it is protected, what the company can and cannot do with that data, and what they will do in the event of a data breach (105 ILCS 85).