A Practice Note addressing key student privacy requirements applicable to third-party educational service providers that use, maintain, share, or dispose of student-related data. This note discusses federal laws, state laws, and industry guidelines that protect the privacy of students' educational records and data, including the federal Family Educational Rights and Privacy Act (FERPA), Protection of Pupil Rights Amendment (PPRA), and California's Student Online Personal Information Protection Act (SOPIPA).