As amended on 1/16/2026: - Expands existing student data privacy protections to higher education and strengthens restrictions on the use of student information. - Amends K–12 (KOPIPA) and preschool (ELPIPA) privacy laws to cover any online service known to be used for school purposes, rather than only those explicitly designed and marketed as such. - Prohibits operators from using student data to train AI. - Establishes the Higher Education Student Information Protection Act (HESIPA) to extend similar protections to college students, effective July 1, 2026. - Creates a private right of action. - The 1/16/2026 amendment applies provisions to an entity working on behalf of the operator and deletes certain exemptions in furtherance of school purposes.
| Date | Chamber | Action |
|---|---|---|
Jan 27, 2026 | — | In Senate. Read first time. To Com. on RLS. for assignment. |
Jan 26, 2026 | — | Read third time. Passed. Ordered to the Senate. (Ayes 65. Noes 5. Page 3835.) |
Jan 22, 2026 | — | Assembly Rule 63 suspended. (Page 3806.) |
Jan 22, 2026 | — | In committee: Set, first hearing. Referred to suspense file. |
Jan 22, 2026 | — | From committee: Do pass. (Ayes 14. Noes 1.) (January 22). |
Jan 22, 2026 | — | Read second time. Ordered to third reading. |
Jan 22, 2026 | A | Hearing Scheduled - Appropriations |
Jan 20, 2026 | — | Re-referred to Com. on APPR. |
| Last Action | Jan 27, 2026 |
|---|---|
| Year | 2025 |
| Bill Type | Bill |
| Created | Mar 21, 2026 |
| Updated | Jan 28, 2026 |