School technology providers would delete data after graduation or contract endings

Covered school technology providers would delete student and immediate-family personal information. This covers providers contracted with Virginia school divisions or private K–12 schools. Covered services are designed and marketed mainly for schools, used at school employees' direction or by school-support groups, and handle identifying data about current or former students or their immediate families. State or federal laws or regulations could require otherwise. Services used for college and career readiness assessments are excluded. Products designed and marketed for general use are excluded, even if also marketed for schools. Providers would delete all covered data within six months of contract termination. They would delete relevant student and family data within six months of that student's high school graduation.