Student data privacy has been a hot topic in the last year or so and is only expected to gain momentum as educational services, websites, and mobile apps infiltrate classrooms everywhere, with students of all ages from elementary grades to university levels. As new bills, laws and legislation get passed, it's becoming crucially important for businesses developing student-focused websites and mobile apps to stay up to date with legal requirements and make sure that their Terms of Service agreements reflect an appropriate level of student data privacy. Student data privacy is governed by a number of different laws such as the Family Educational Rights and Privacy Act (FERPA), the Protection of Pupil Rights Amendment (PPRA), and the Children's Online Privacy Protection Act (COPPA). Recently, the Department of Education released a PDF report that provides guidance on what schools and educational parties should look for and consider when reading the Terms of Service agreement of any website or app that they sign up with that will be connected in any way with the personal data of students. We'll highlight the main points that should be taken from the report and applied to the Terms of Service agreement of your website/mobile app if you're developing a website or app that will be used by students.