Student Test Taker Privacy Protection Act: end-to-end encryption

The law adds a technical safeguard for students’ exam-related personal information, preventing proctoring providers from reading data while it is transmitted.

What the law does ​

• Requires businesses providing proctoring services to school districts, county offices of education, or charter schools to use end-to-end encryption for classroom- or course-based exams beginning July 1, 2027.
• Requires encryption that protects data from the sender’s device until it reaches the intended recipient’s device, unreadable by anyone else, including the proctoring business.
• Continues to limit proctoring businesses to collecting, using, retaining, and disclosing only personal information strictly necessary to provide their services, subject to listed legal and emergency exceptions.

Who it affects ​

• Businesses that observe, monitor, or administer exams for local educational agencies.
• School districts, county offices of education, charter schools, and students using covered proctored exams.