Skip To Main Content

Student Online Personal Protection Act (SOPPA)

Students will use educational websites in the classroom that will sometimes use their name or other login information to track their work.

Many of these websites are subject to the Illinois’ Student Online Personal Protection Act, or SOPPA (105 ILCS 85/). Educational technology vendors and other entities that operate Internet websites, online services, online applications, or mobile applications that are designed, marketed, and primarily used for K-12 school purposes are referred to in SOPPA as operators. SOPPA is intended to ensure that student data collected by operators is protected, and it requires those vendors, as well as school districts and the Illinois State Board of Education, to take a number of actions to protect online student data.

Depending upon the particular educational technology being used, the District may need to collect different types of student data and share it with educational technology vendors through their online sites, services, and/or applications. Under SOPPA, educational technology vendors are prohibited from selling or renting students’ information, or from engaging in targeted advertising using their information. Such vendors may only disclose student data for K-12 school purposes and other limited purposes permitted under the law.

In general terms, the types of student data that may be collected and shared include personally identifiable information (PII) about students or information that can be linked to PII about students, such as:

  • Basic identifying information, including student or parent/guardian name and student or parent/guardian contact information, username/password, student ID number
  • Demographic information
  • Enrollment information
  • Assessment data, grades, and transcripts
  • Attendance and class schedule
  • Academic/extracurricular activities
  • Special indicators (disability information, English language learner, free/reduced-price meals, or homeless/foster care status)
  • Conduct/behavioral data
  • Health information
  • Food purchases
  • Transportation information
  • In-application performance data
  • Student-generated work
  • Online communications
  • Application metadata and use statistics
  • Permanent and temporary school student record information 

Operators may collect and use student data only for K-12 purposes that aid in the administration of school activities, such as:

  • Instruction in the classroom or at home (including remote learning)
  • Administrative activities
  • Collaboration between students, school personnel, and/or parents/guardians
  • Other activities that are for the use and benefit of the District