Here, from the Department of Education. An excerpt:
The U.S. Department of Education’s Privacy Technical Assistance Center (PTAC) released new guidance today to help school systems and educators interpret and understand the major laws and best practices protecting student privacy while using online educational services.
The guidance summarizes the major requirements of the Family Educational Rights and Privacy Act (FERPA) and the Protection of Pupil Rights Amendment (PPRA) that relate to these educational services, and urges schools and districts to go beyond compliance to follow best practices for outsourcing school functions using online educational services, including computer software, mobile applications and web-based tools.
“As an education community, we have to do a far better job of helping teachers and administrators understand technology and data issues so that they can appropriately protect privacy while ensuring teachers and students have access to effective and safe tools,” said U.S. Secretary of Education Arne Duncan. “We must provide our schools, teachers and students cutting-edge learning tools—and we must protect our children’s privacy. We can accomplish both—but we will have to try harder to do it.”
Other great privacy resources can be seen here.