California AB 1159 — Student Data Collection, Retention, and Commercial Use Safeguards (CA AB 1159)
Tightens rules on how California schools and their ed-tech vendors collect, retain, and use student data. Bans commercial sale or ad-targeting use of school-collected data and imposes retention-minimization and parental-access requirements.
Key Provisions
What CA AB 1159 requires
Prohibits commercial sale or sharing of student data collected in school contexts
Bans use of school-collected data for targeted advertising
Requires vendors to adopt written data-retention schedules and minimum-necessary collection
Parents and eligible students must be able to review and request deletion of stored data
Vendor contracts must include student-data-protection clauses
Rule Categories Covered
Phosra enforcement categories for CA AB 1159
Student Privacy School Mode
otherEnforces student privacy school mode rules across connected platforms.
Commercial Data Ban
otherEnforces commercial data ban rules across connected platforms.
Data Sharing Control
privacyControls what personal data can be shared with third parties and platform partners.
Platforms Affected
Platforms covered by CA AB 1159
MCP Enforcement
Enforce CA AB 1159 with a single API call
// Enforce CA AB 1159 compliance
tool: trigger_child_enforcement
input: {
child_id: "ch_emma_01",
law: "CA_AB_1159",
rules: [
"student_privacy_school_mode",
"commercial_data_ban",
"privacy_data_sharing"]
}
→ Google Workspace for Education enforcement applied ✓
→ Microsoft 365 enforcement applied ✓
→ Canvas enforcement applied ✓
→ Clever enforcement applied ✓
Start building CA AB 1159-compliant features today
Phosra handles the complexity of multi-platform compliance so you can focus on building great products for families.