In an era where schools depend on digital tools for everything from instruction to administration, the question of how to protect student data has never been more urgent. While federal policies like FERPA and COPPA provide a foundation, they often leave states and districts with more questions than answers. In most of the country, responsibility for data privacy has fallen to local education agencies (LEAs), leaving them to navigate complex issues with limited resources.