Rights & Ethics

student data

Personal, evaluative or behavioral information from education platforms.

How the laws define this

Educational standards consistently treat student data as encompassing personal or identifying information alongside assessment records collected during learning activities. Each instrument agrees that core personal details and evaluative results fall squarely under this concept. The primary divergence lies in how broadly each instrument incorporates technical telemetry and inferred software data. S.B. 267 Software in Education Amendments adopts the broadest scope, explicitly including metadata, device identifiers, clickstream data, behavioral metrics, and any information software generates or infers. Project 7659/2023 covers personal, evaluative, or behavioral information and interaction logs from education platforms. Meanwhile, the Yapay Zeka ve Eğitim teacher guide focuses on personally identifiable information, assessment records, and student work products collected, stored, or processed in educational contexts.

Synthesised from the 3 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

Jurisdiction	Instrument	Status	What is distinctive
Utah, United States	S.B. 267 Software in Education Amendments	In Force	Expands beyond personal data to explicitly include metadata, device identifiers, clickstream data, behavioral, engagement, or usage data, and any information collected, generated, or inferred during student use of software.
Turkey	Artificial Intelligence and Education: Practical Prompt Engineering and Innovative Learning Strategies for Teachers	In Force	Treats student data as sensitive with recommendations for anonymization, KVKK-consistent handling, consent procedures, and risk assessments before using AI in non-binding guidelines.
Peru	Project 7659/2023 — Bill to include programming, robotics and AI education in the school curriculum	Under Review	Adds requirements for data minimization, anonymization for reporting, parental consent, and protections under applicable data- and child-protection laws in a bill under review.

What it triggers

In Utah, under S.B. 267, it triggers a mandated study by the State Board of Education on software and digital services in public schools.
In Turkey, the guide recommends anonymization, KVKK-consistent handling, consent procedures, and risk assessments before AI use.source
In Peru, under Project 7659/2023, it would require data minimization, anonymization for reporting, parental consent where appropriate, and protections under applicable data- and child-protection laws.source

Definitions (3)

Defined as any personal, evaluative or behavioral information collected through education platforms, including assessment results, interaction logs and identifying data; the bill requires data minimization, anonymization for reporting, parental consent where appropriate, and protections under applicable data- and child-protection laws.

Project 7659/2023 — Bill to include programming, robotics and AI education in the school curriculumDefinition 1 of 3

Any personally identifiable information, assessment records, or student work products collected, stored, or processed in educational contexts. The guide treats student data as sensitive, recommends anonymization, KVKK‑consistent handling, consent procedures, and risk assessments before AI use.

Yapay Zeka ve Eğitim: Öğretmenler İçin Uygulamalı Prompt Mühendisliği ve Üretken Araçlarla Yenilikçi Öğrenme Stratejileri (Teacher Guide)Definition 2 of 3

Includes a student's personal data (as defined in Section 13-61-101), metadata, device identifiers, clickstream data, behavioral, engagement, or usage data, and any information a software collects, generates, or infers in the course of student use.

S.B. 267 Software in Education AmendmentsDefinition 3 of 3

Not to be confused with

Personal identifying information

Personal identifying information focuses on data that identifies or could identify a minor, while student data encompasses broader personal, evaluative, or behavioral information from education platforms.

Personal data of minors

Personal data of minors refers specifically to children's data under GDPR with added safeguards, whereas student data covers a wider range of information collected in educational contexts.

Questions and answers

What extra data types does Utah include in student data?

Utah's definition includes metadata, device identifiers, clickstream data, behavioral, engagement, or usage data, and any information collected, generated, or inferred during student use.

What handling practices does the Turkish AI education guide recommend for student data?

It recommends anonymization, KVKK-consistent handling, consent procedures, and risk assessments before using AI.

What protections would Peru's Project 7659/2023 impose on student data?

It would require data minimization, anonymization for reporting, parental consent where appropriate, and protections under applicable data- and child-protection laws.