While New York Attorney General Letitia James’s name has dominated much of the news in 2024 already, one of the most noteworthy instances did not garner nearly enough attention. In mid-February, Ms. James announced that the College Board—which many parents know as the company that administers the PSAT, SAT, and AP exams—would pay New York state $750,000 for violating students’ privacy, and it would agree to halt its practice of selling student data.

According to the complaint, the College Board sold the data of the students taking these tests to colleges, scholarship programs, and other customers. Despite being illegal (since a law was passed in 2014), the company exploited what appeared to be a loophole that allowed it to generate more than $28 million in revenue between 2018 and 2022. The full extent of the College Board’s activity makes the settlement amount seem small in retrospect. It also should be a wake-up call regarding the state of student data privacy in our education system.

Leaving policy loopholes aside, our education system has been heavily burdened of late with an endless barrage of cyberattacks. According to New York state Comptroller Thomas DiNapoli, in a report released in October 2023, the number of ransomware attacks and data breaches in New York over the past six years ranks the state third in the country.

And now, on top of attacks by bad actors, our education system is forced to root out those who are exploiting legislative holes. In the case of the College Board, they argued that language holding “third party vendors” to certain standards didn’t apply to them (they apparently didn’t consider themselves contracted vendors). The College Board also engaged in the practice of collecting additional data from teens during the registration process, including highly personal details that would later be used for marketing purposes.

We recently exposed the same practice by online mental health business Talkspace in its partnership with New York City’s Department of Health. As part of the NYC Teenspace offering, the company asks a long list of highly personal mental health questions before the teen is officially registered (and parental consent is asked for—a requirement in New York state). The company maintains that this information is required to “match” a consumer toa therapist, but that is now disputed and the subject of a class action lawsuit against the company.

If our education system can’t fend off the bad actors and can’t identify the exploitative practices of those they want to partner with, how will our children’s privacy ever be protected? It’s not enough to have laws in place; they need to be airtight, and those enforcing them need to be far savvier and experienced in identifying these pitfalls.

Read the commentary in the Epoch Times.

You may also like

How NY businesses get shafted — as Albany boosts Idaho’s Micron with $5.5B

Every business owner in the state, looking at his or her own challenges, their tax bills, their regulatory burden, should be asking the question: How different would things be if my company was a politically favored project being announced by the governor? What favors would Albany do for me? What would Micron get? Read More

Can New York Survive a Cuomo Comeback?

Andrew Cuomo picked a portentous day to launch his New York City mayoral campaign. Sunday was the fifth anniversary of his announcement, as governor, of the city’s first confirmed case of Covid-19. Read More

Hochul invites havoc as wildcat prison strikes spread

A central provision of New York state law — its prohibition on public-employee strikes — is at risk of breaking into pieces, as Gov. Hochul frantically tries to tape the shards back together. Read More

NY’s own researchers warn of state’s off-the-charts school spending

What was expected to be a mundane state-ordered study into how Albany doles out cash to local school districts turns out to be required reading for New York taxpayers — and state lawmakers. Read More

Hochul’s mad Medicaid spending woos health honchos

Perhaps the most damning commentary on Gov. Hochul’s Medicaid spending plan — which made up roughly half of the $252 billion state budget she released Tuesday — was the silence of the attack dogs. Last year, the hospital lobby spent millions on TV ads falsely accusing Hochul of “cutting” the state-run health plan, which covers 7 million lower-income New Yorkers. This year, the ad campaign has gone quiet, a sign she is giving hospitals everything they could want and more. Read More

New York Is a Cautionary Tale on Home Care

Fans of ’s “Medicare at Home” proposal should study up on New York’s bloated home healthcare system, which covers about 850,000 people. Its large scale and rapid growth embody a cent Read More

Hochul bows to health-worker union’s $9B senior-care power play that could bust NY’s budget

Gov. Hochul’s overhaul of the  reached a milestone last week when she named a Georgia-based company as the winning bidder to be the program’s statewide “fiscal intermediary” — and to replace  that currently handle those duties. The  dre Read More

Another Voice: Albany’s MTA congestion pricing battles have implications for Western New York

Gov. Kathy Hochul has taken blistering criticism for postponing congestion pricing, a long-planned $15 toll on drivers entering lower Manhattan meant to reduce traffic — and collect $15 tolls. Most of the drama may be playing out in New York City, but pay attention, upstate: you stand to lose — or win — in this fight. Read More