FILTERS



Find by DATE
Reset

Latest Cases & Developments


  • Date:

    Student Defense Releases “Student AI Bill of Rights” and Calls for Adoption from Higher Education Institutions (Apr. 3, 2026)

    The organization Student Defense, as part of its SHAPE (Safeguarding Higher-Ed through AI Practices & Ethics) AI Initiative, released a “Student AI Bill of Rights” and called on higher education institutions to adopt this framework to better protect students as AI continues to transform the higher ed landscape. The articles within the bill of rights include: (1) the right to transparency and “notice”; (2) the right to human oversight and appeal; (3) the right to data sovereignty and intellectual property; (4) the right of all students to safely use AI; and (5) the right to share in AI and its benefits.

    Topics:

    Data Privacy | Ethical Obligations of Higher Education Lawyers | Ethics | General Counsel | Privacy & Transparency

  • Date:

    Department of Labor Releases AI Literacy Framework (Feb. 13, 2026)

    The Department of Labor announced that it has published a framework for artificial intelligence (AI) literacy to serve as a resource for program design and encourage expanded AI literacy training across the public workforce and education systems.

    Topics:

    Data Privacy | Privacy & Transparency | Technology | Technology Accessibility

  • Date:

    Department of Education Issues Guidance Regarding FERPA Obligations (Feb. 5, 2026)

    The Department of Education’s Student Privacy Policy Office (SPPO) announced that it has launched an investigation into Tufts University and the National Student Clearinghouse (NSC) for potential violations of the Family Educational Rights and Privacy Act (FERPA) based on the National Study of Learning, Voting, and Engagement (NSLVE). In addition to initiating an investigation, the Department issued guidance to all institutions of higher education clarifying their obligations under FERPA to maintain student data privacy and the consequences of noncompliance. The new guidance rescinds all guidance and polices from the Biden administration that encouraged participation in the NSLVE. The guidance further states that SPPO believes that NSLVE use of student data may not qualify for the “studies exception” and advises institutions to wait until the Department completes its investigation before using any NSLVE reports or data to avoid the risk of violating FERPA.

    Topics:

    Data Privacy | Family Educational Rights and Privacy Act (FERPA) | Privacy & Transparency

  • Date:

    Baggett v. State Univ. of New York. at Niagara, Niagara Cnty. Cmty. Coll. (W.D. N.Y. Dec. 8, 2025)

    Opinion Denying in Part Defendant’s Motion to Dismiss. Plaintiff, a former student at SUNY Niagara County Community College, brought claims of negligence, breach of contract, and unjust enrichment against the college following a data breach that exposed his and other potential class members’ personally identifiable information and caused them harm through increased risk of identity theft and mitigation costs. As a preliminary matter, the court held plaintiff had Article III standing because the unauthorized exposure of his private information, along with the costs of mitigating identity theft, constituted a concrete injury. The court found that plaintiff had sufficiently alleged a breach of contract claim, finding it plausible that there was an implied contract and a reasonable expectation that the college would safeguard plaintiff’s data. The court further allowed plaintiff’s unjust enrichment claim to proceed, finding he plausibly alleged that the college had enriched itself by failing to provide adequate data security. However, the court granted the college’s motion to dismiss plaintiff’s negligence per se claim, reasoning that the Federal Trade Commission Act did not create a private right to action in New York.

    Topics:

    Cybersecurity | Data Privacy | Privacy & Transparency | Technology

  • Date:

    Clark County School District v. Eighth Jud. Dist. Ct. (Nev. Nov. 26, 2025)

    Opinion Granting Writ of Mandamus. A school district petitioned the Supreme Court of Nevada for a writ of relief after the district court ordered it to produce all emails stored in the school district’s Google Vault cloud database that referenced a specific student, following a records request from the student’s educational decision maker. In March, the Nevada Supreme Court agreed with the district court, holding that the emails stored in school district’s Google Vault were “maintained” by the school district, and required the district court to perform an in camera review of all emails that mentioned the student to determine if they were “directly related” to the student. After the school district petitioned the court for a rehearing, the court vacated its prior opinion and, in November, issued a new ruling. The court held that emails on the district court’s cloud servers were not “maintained” for FERPA purposes unless “the school district or its agent takes affirmative and intentional steps to treat the email as an institutional record and stores it with a designated individual in a designated place.” The court also clarified FERPA’s “directly related” requirement, noting that “an email that merely mentions a student does not necessarily directly relate to and bear a close connection to the student.”

    Topics:

    Data Privacy | Family Educational Rights and Privacy Act (FERPA) | Privacy & Transparency

  • Date:

    ACE Comments on Regulatory Reform of AI (Oct. 27, 2025)

    The American Council on Education (ACE) along with eight other higher education associations, sent comments to the Trump Administration in response to the request for information on Artificial Intelligence (AI) and federal regulation, urging deregulation and the implementation of essential safeguards. The comments outline several regulatory efforts, such as (1) need for human oversight in administrative processes; (2) concerns for under-resourced institutions; and (3) ensuring established privacy protections are supported.

    Topics:

    Data Privacy | Disability Discrimination | Discrimination, Accommodation, & Diversity | Privacy & Transparency | Technology | Technology Accessibility

  • Date:

    Murray v. Conn. Coll. (D. Conn. Sep. 23, 2025)

    Opinion Granting in Part Defendant’s Motion to Dismiss. Plaintiff, a former student at Connecticut College, in a putative class action, brought negligence, breach of contract, and unjust enrichment claims against the college seeking damages and injunctive relief after a data-security breach which, according to plaintiff, allowed unauthorized third-party cybercriminals to gain access to his personal identifying information (PII) and personal health information (PHI)  The court rejected the college’s argument that plaintiff lacked Article III standing to sue, finding that plaintiff had sufficiently alleged an injury from potential misuse of his data that was “sufficiently concrete, particularized, actual or imminent.” The court allowed plaintiff’s breach of contract claim to proceed, finding plaintiff made a plausible argument that, because he was required to provide PII and PIH as a condition of enrollment, it was fair to assume the college made an implicit promise to responsibly maintain his data. However, the court dismissed plaintiff’s negligence claim, finding he had failed to offer any analysis of the duty question under Connecticut law.

    Topics:

    Cybersecurity | Data Privacy | Litigation, Mediation & Arbitration | Privacy & Transparency | Technology | Tort Litigation

  • Date:

    ACE Letter on AI Action Plan (Mar. 14, 2025)

    Letter from the American Council on Education (ACE) to the National Coordination Office offering input on the development of an Artificial Intelligence (AI) Action Plan. The letter recommends that the administration focus the Action Plan on: (1) establishing experimental sites for institutions across the postsecondary spectrum to pilot the use of AI in admissions and other areas; (2) keep FERPA in mind when considering student privacy issues; (3) encourage the Department of Education to convene groups and share best practices, especially with under resourced institutions; (4) incentivize the private sector to partner with a consortium of institutions, including under resourced institutions, and work to close the gaps in access to technology and requisite infrastructure to fully utilize AI across the postsecondary landscape; (5) provide additional funding for the Small Business Innovation Research program at the Institute of Education Sciences and expand the Fund for the improvement of Postsecondary Education Digital Learning Infrastructure and IT Modernization Pilot program; (6) support efforts to protect academic integrity and incorporate AI into curricula; and (7) support workforce development in AI through the academic pipeline. 

    Topics:

    Cybersecurity | Data Privacy | Privacy & Transparency | Technology

  • Date:

    Removing Barriers to American Leadership in Artificial Intelligence – The White House (Jan. 23, 2025)

    Executive Order: Removing Barriers to American Leadership in Artificial Intelligence. This Executive Order revokes Executive Order 14110: Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence. The Order charges the Assistant to the President for Science and Technology (APST) the Special Advisor for AI and Crypto, and the Assistant to the President for National Security Affairs (APNSA), in coordination with the Assistant to the President for Economic Policy, the Assistant to the President for Domestic Policy, and the Director of the Office of Management and Budget (OMB Director) with developing an action plan to sustain and enhance America’s global AI dominance in order to promote human flourishing, economic competitiveness, and national security within 180 days of the Order.  

    Topics:

    Cybersecurity | Data Privacy | Distance Learning | Privacy & Transparency | Technology

  • Date:

    Office of Educational Technology Brief on Navigating Artificial Intelligence in Postsecondary Education: Building Capacity for the Road Ahead (Jan. 14, 2025)

    Brief from the U.S. Department of Education, Office of Educational Technology titled “Navigating Artificial Intelligence in Postsecondary Education: Building Capacity for the Road Ahead.” The Brief is aimed to support institutional leaders who oversee the implementation of Artificial Intelligence (AI) across multiple areas of their institution. The Brief is divided between (1) providing recommendations, as well as guiding questions for institutional leaders related to AI; and (2) evidence-based insights on AI integration in learning environments, career readiness, admissions, enrollment, student advising and support, digital infrastructure, and faculty developments.  

    Topics:

    Cybersecurity | Data Privacy | Privacy & Transparency | Technology