Privacy Laws Reference Guide

Why Privacy Laws Matter to You

Every time you go online, create an account, or use an app, your personal information is being collected. Privacy laws exist to protect you and give you control over your data. This guide explains the most important laws that affect your digital life as a student.

Key Idea: You have rights! Even as a young person, laws protect your privacy and give you the power to control who has access to your personal information.

🛡️

Children's Online Privacy Protection Act

COPPA

What It Is

COPPA is a U.S. federal law passed in 1998 (updated in 2013) that protects the online privacy of children under 13 years old. It requires websites and online services to get parental consent before collecting personal information from kids.

Who It Protects

Any child under age 13 in the United States. If you're 13 or older, COPPA doesn't directly apply to you anymore, but it helps explain why many social media platforms require users to be at least 13 years old.

What It Requires

Websites must post clear privacy policies explaining what information they collect from children
Companies must get verifiable parental consent before collecting, using, or sharing a child's personal information
Parents have the right to review their child's information and request it be deleted
Companies must protect children's information with reasonable security measures
Companies can only collect information that's necessary for the activity

Real-World Example:

This is why platforms like TikTok, Instagram, and Snapchat require users to be at least 13 years old. If a company discovers that a user is under 13, they're required by COPPA to delete that person's account and information unless they get parental permission.

What This Means for You

If you're under 13, your parents should be involved in decisions about what apps and websites you use. If you're 13 or older, COPPA is why many platforms you use have age verification and why you might notice different features available to younger users.

🎓

Family Educational Rights and Privacy Act

FERPA

What It Is

FERPA is a U.S. federal law passed in 1974 that protects the privacy of student education records. It applies to all schools that receive federal funding, which includes most public schools and many private schools.

Who It Protects

All students attending schools that receive federal funds. Your parents have FERPA rights until you turn 18 or enter college, then the rights transfer to you.

What It Protects

Your grades, test scores, and academic performance records
Disciplinary records and behavioral reports
Health and medical information maintained by the school
Special education and IEP records
Contact information and personal identifiers
Information created by teachers and counselors about you

Your Rights Under FERPA

Right to Access

You (or your parents) can review your education records and ask questions about what's in them.

Right to Corrections

If you find errors in your records, you can request that the school correct them.

Right to Control Disclosure

Schools generally need your (or parental) consent before sharing your records with others.

Right to File Complaints

If you believe your rights have been violated, you can file a complaint with the U.S. Department of Education.

Real-World Example:

When your school uses educational technology like Google Classroom, Canvas, or AI-powered learning platforms, FERPA regulates how your data can be shared with these companies. Schools must ensure these companies protect your information and only use it for educational purposes.

Important Exceptions

Schools can share your information without consent in certain situations:

With school officials who have a legitimate educational interest
When you're transferring to another school
In health or safety emergencies
With certain government officials for auditing purposes
"Directory information" (name, address, phone, photos) unless parents opt out

🌍

General Data Protection Regulation

GDPR (European Union)

What It Is

GDPR is a comprehensive privacy law that took effect in the European Union in 2018. While it's a European law, it affects companies worldwide - including apps and websites you might use - because many companies operate globally.

Why It Matters to You

Even if you don't live in Europe, GDPR has influenced privacy practices globally. Many U.S. companies have improved their privacy features because of GDPR, and several U.S. states have passed similar laws based on GDPR principles.

Key Rights Under GDPR

Right to Access: You can ask companies what data they have about you
Right to Rectification: You can correct inaccurate information
Right to Erasure ("Right to be Forgotten"): You can request deletion of your data
Right to Data Portability: You can download your data and move it to another service
Right to Object: You can object to certain types of data processing
Right to Restrict Processing: You can limit how companies use your data

Real-World Example:

Have you noticed those cookie consent banners that pop up on websites asking permission to track you? That's because of GDPR! The law requires websites to get your explicit consent before using cookies and tracking technologies. Many websites now offer these controls to all users, not just Europeans.

GDPR's Influence in the U.S.

GDPR inspired several U.S. state laws, including:

California Consumer Privacy Act (CCPA): Gives California residents similar rights to GDPR
Virginia Consumer Data Protection Act (VCDPA)
Colorado Privacy Act (CPA)
Many other states are considering similar legislation

📍

State Privacy Laws

California, Virginia, Colorado, and More

What They Are

Since the U.S. doesn't have a comprehensive federal privacy law for adults (beyond specific situations like COPPA and FERPA), individual states have been passing their own privacy laws. California led the way, and many states are following.

California Consumer Privacy Act (CCPA)

The CCPA, which took effect in 2020, gives California residents (including minors) significant privacy rights:

Know what personal information companies collect about you
Know if your personal information is sold or shared and to whom
Say no to the sale of your personal information
Access your personal information
Request deletion of your personal information
Not be discriminated against for exercising your privacy rights

Real-World Example:

If you live in California, you've probably seen "Do Not Sell My Personal Information" links on websites. This is required by CCPA. Clicking this link tells the company not to sell your data to other businesses. Even if you don't live in California, many companies now offer this option to everyone.

Other State Laws

More states are passing privacy laws similar to California's. Check if your state has privacy protections and what rights you have. The trend is toward giving consumers more control over their data nationwide.

How to Exercise Your Privacy Rights

These laws give you power - but only if you use them! Here's how to take action:

Read Privacy Policies (at least the important parts) Look for sections about data collection, sharing, and your rights. Most policies now have a summary section that's easier to understand.
Look for Privacy Settings Every major platform has privacy settings. Take time to review and adjust them. Don't just accept the defaults!
Request Your Data Many companies now have a way to download all the data they've collected about you. Try it - you might be surprised what they know!
Opt Out of Data Sales Look for "Do Not Sell My Personal Information" links on websites. Use them! It's your right.
Ask for Deletion If you no longer use a service, request that they delete your data. Most companies are now required to honor this request.
File Complaints If you believe your privacy rights have been violated, you can file complaints with the Federal Trade Commission (FTC) or your state's attorney general.

Learn More About Your Privacy Rights

Federal Trade Commission (FTC)
Consumer.ftc.gov - Free resources about privacy, identity theft, and online safety
Electronic Frontier Foundation (EFF)
EFF.org - Digital rights advocacy and education about online privacy
Common Sense Media
CommonSenseMedia.org - Privacy resources specifically for students and families
Privacy Rights Clearinghouse
PrivacyRights.org - Comprehensive information about privacy rights and how to protect them
Your State Attorney General
Look up your state's attorney general website for state-specific privacy resources and complaint forms