An Act To Prohibit Providers of Cloud Computing Service to Elementary and Secondary Educational Institutions from Processing Student Data for Commercial Purposes
Sec. 1. 20-A MRSA §6006 is enacted to read:
§ 6006. Student privacy and cloud computing
(1) A student in the course of the student's use of a cloud computing service; or
(2) An employee or agent of an educational institution, if the information or materials are related to a student.
"Student data" includes, but is not limited to, the name, e-mail address, postal address, telephone number, unique identifier or metadata or any e-mail message or word processing document of a student.
This bill prohibits a cloud computing service provider that provides a cloud computing service to an educational institution from using that service to process student data for any secondary use that benefits the provider or any 3rd party.