An anonymous reader writes ""Any person who provides a cloud computing service to an educational institution operating within the State shall process data of a student enrolled in kindergarten through twelfth grade for the sole purpose of providing the cloud computing service to the educational institution and shall not process such data for any commercial purpose, including but not limited to advertising purposes that benefit the cloud computing service provider,
"Schools must ensure that they place appropriate limits on data collection and use best practices for cloud service providers,"
"Protecting the privacy of our students is common sense and shouldn't be sold to the highest bidder. Student privacy should not be for sale. Period." Cameron Evans, Microsoft"Link to Original Source