Back to Frameworks

Student Privacy Pledge 2020

Self-Assess
United States (voluntary industry commitment)
vStudent Privacy Pledge 2020 (effective 1 December 2020; legacy 2015 Pledge sunset June 2021); retired by FPF on 25 April 2025
2 domains
14 controls

The Student Privacy Pledge 2020 of the Future of Privacy Forum and SIIA: fourteen public commitments by K-12 edtech providers on Student PII, including no sale, no behavioural advertising, no non-school profiling, use and retention only for authorised school purposes, clear disclosure, access and correction, a comprehensive security program, vendor and successor flow-down, and privacy by design. Effective 1 December 2020; FPF retired the Pledge on 25 April 2025, and former signatories stay bound for data collected while they signed. Built from the 2020 Pledge text, read in full.

Verified

Student Privacy Pledge 2020 is a compliance framework from United States (voluntary industry commitment) with 2 domains and 14 controls that map to 54 other frameworks. The largest domains are Affirmative commitments (the eight 'will' commitments) – Student Privacy Pledge 2020 (8 controls), Commitments not to act (the six 'will not' commitments) – Student Privacy Pledge 2020 (6 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (2)

Affirmative commitments (the eight 'will' commitments) – Student Privacy Pledge 2020

8 controls
Controls in the Affirmative commitments (the eight 'will' commitments) – Student Privacy Pledge 2020 domain of Student Privacy Pledge 2020: 8 controls
CodeTitle
student-privacy-pledge-2020::P07Commitment 7: Collect, use, share and retain Student PII only for authorised purposes
student-privacy-pledge-2020::P08Commitment 8: Clear disclosure of the Student PII collected and how it is used or shared
student-privacy-pledge-2020::P09Commitment 9: Support access to and correction of Student PII
student-privacy-pledge-2020::P10Commitment 10: Comprehensive security program with appropriate safeguards
student-privacy-pledge-2020::P11Commitment 11: Resources to help schools and families protect Student PII
student-privacy-pledge-2020::P12Commitment 12: Vendors bound to the same commitments
student-privacy-pledge-2020::P13Commitment 13: Successor entity held to the same commitments
student-privacy-pledge-2020::P14Commitment 14: Privacy and security built into products, with compliance with applicable law

Commitments not to act (the six 'will not' commitments) – Student Privacy Pledge 2020

6 controls
Controls in the Commitments not to act (the six 'will not' commitments) – Student Privacy Pledge 2020 domain of Student Privacy Pledge 2020: 6 controls
CodeTitle
student-privacy-pledge-2020::P01Commitment 1: No collection, use or sharing of Student PII beyond authorised educational purposes
student-privacy-pledge-2020::P02Commitment 2: No sale of Student PII
student-privacy-pledge-2020::P03Commitment 3: No behavioural targeting of advertisements to students
student-privacy-pledge-2020::P04Commitment 4: No personal profile of a student other than for authorised purposes
student-privacy-pledge-2020::P05Commitment 5: No material privacy policy change without prominent notice and choices
student-privacy-pledge-2020::P06Commitment 6: No knowing retention beyond the authorised period

Your Compliance Coverage

If you comply with Student Privacy Pledge 2020, you already cover:

Vietnam PDPD

6%

1 controls mapped

Compare →

Vietnam Law on Cybersecurity (No. 116/2025/QH15)

6%

1 controls mapped

Compare →

Vermont Data Privacy and Online Surveillance Act

6%

1 controls mapped

Compare →

+ 51 more: USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement) (6%), UNICEF Policy Guidance on AI for Children (2021) (6%)

See all 54 mapped frameworks ↓

Maps to 54 other frameworks

18 total controls
Vietnam PDPD
1 source controls mapped|2 target controls covered
6%
Vietnam Law on Cybersecurity (No. 116/2025/QH15)
1 source controls mapped|2 target controls covered
6%
Vermont Data Privacy and Online Surveillance Act
1 source controls mapped|2 target controls covered
6%
USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)
1 source controls mapped|2 target controls covered
6%
UNICEF Policy Guidance on AI for Children (2021)
1 source controls mapped|1 target controls covered
6%
Regional Comprehensive Economic Partnership (RCEP) - E-Commerce Chapter
1 source controls mapped|1 target controls covered
6%
South Africa Promotion of Access to Information Act (PAIA)
1 source controls mapped|1 target controls covered
6%
Turkey KVKK
1 source controls mapped|2 target controls covered
6%
TEFCA - Trusted Exchange Framework and Common Agreement
1 source controls mapped|1 target controls covered
6%
AICPA Privacy Management Framework (PMF)
1 source controls mapped|3 target controls covered
6%
Australian Privacy Principles (APPs)
1 source controls mapped|3 target controls covered
6%
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
1 source controls mapped|1 target controls covered
6%
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
1 source controls mapped|6 target controls covered
6%
Azerbaijan Law on Personal Data (2010)
1 source controls mapped|4 target controls covered
6%
South Korea ISMS-P
1 source controls mapped|3 target controls covered
6%
APPI
1 source controls mapped|3 target controls covered
6%
WHO Global Strategy on Digital Health 2020-2025
1 source controls mapped|1 target controls covered
6%
ISO/IEC 29134:2023
1 source controls mapped|3 target controls covered
6%
ISO/IEC 29100:2024
1 source controls mapped|3 target controls covered
6%
SASB Standards
1 source controls mapped|2 target controls covered
6%
COSO Internal Control - Integrated Framework (2013)
1 source controls mapped|1 target controls covered
6%
Barbados Data Protection Act 2019
1 source controls mapped|5 target controls covered
6%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
1 source controls mapped|11 target controls covered
6%
Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019)
1 source controls mapped|1 target controls covered
6%
SOC 2
1 source controls mapped|3 target controls covered
6%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
1 source controls mapped|2 target controls covered
6%
Connecticut Data Privacy Act (CTDPA)
1 source controls mapped|1 target controls covered
6%
ISO/IEC 27400:2022
1 source controls mapped|4 target controls covered
6%
Albania Law No. 124/2024 on Personal Data Protection
1 source controls mapped|2 target controls covered
6%
SOC for Cybersecurity - Cybersecurity Risk Management Examination
1 source controls mapped|2 target controls covered
6%
GDPR
1 source controls mapped|8 target controls covered
6%
Azure Security Benchmark
1 source controls mapped|1 target controls covered
6%
Saudi Arabia PDPL
1 source controls mapped|5 target controls covered
6%
Bahrain PDPL
1 source controls mapped|5 target controls covered
6%
Armenia Law on Protection of Personal Data (2015)
1 source controls mapped|3 target controls covered
6%
UK Open Banking Standard
1 source controls mapped|1 target controls covered
6%
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
1 source controls mapped|3 target controls covered
6%
Florida Digital Bill of Rights (FDBR)
1 source controls mapped|2 target controls covered
6%
FTC GLBA Safeguards Rule (16 CFR Part 314)
1 source controls mapped|2 target controls covered
6%
ITU-T X.805 - Security Architecture for End-to-End Communications
1 source controls mapped|1 target controls covered
6%
ISO 27799:2025
1 source controls mapped|3 target controls covered
6%
ISO 26000:2010
1 source controls mapped|1 target controls covered
6%
ISO/IEC 27011:2024
1 source controls mapped|3 target controls covered
6%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
1 source controls mapped|2 target controls covered
6%
ISO/IEC 23894:2023
1 source controls mapped|1 target controls covered
6%
Nebraska Data Privacy Act
1 source controls mapped|2 target controls covered
6%
NIST SP 800-190
1 source controls mapped|3 target controls covered
6%
US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties
1 source controls mapped|1 target controls covered
6%
ASD Strategies to Mitigate Cyber Security Incidents
1 source controls mapped|1 target controls covered
6%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
1 source controls mapped|1 target controls covered
6%
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
1 source controls mapped|1 target controls covered
6%
South Korea Korea Internet Self-Governance Organisation (KISO) Code of Ethics
1 source controls mapped|1 target controls covered
6%
NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices
1 source controls mapped|1 target controls covered
6%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
1 source controls mapped|1 target controls covered
6%
Compare Student Privacy Pledge 2020 with Vietnam PDPD

Coverage is not the same as your position

This page shows what Student Privacy Pledge 2020 overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is Student Privacy Pledge 2020 and who does it apply to?

Student Privacy Pledge 2020 is a compliance framework from United States (voluntary industry commitment) with 2 domains and 14 controls. The Student Privacy Pledge 2020 of the Future of Privacy Forum and SIIA: fourteen public commitments by K-12 edtech providers on Student PII, including no sale, no behavioural advertising, no non-school profiling, use and retention only for authorised school purposes, clear disclosure, access and correction, a comprehensive security program, vendor and successor flow-down, and privacy by design. Effective 1 December 2020; FPF retired the Pledge on 25 April 2025, and former signatories stay bound for data collected while they signed. Built from the 2020 Pledge text, read in full. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does Student Privacy Pledge 2020 actually require?

Student Privacy Pledge 2020 has 14 controls organised across 2 domains. The largest domains are Affirmative commitments (the eight 'will' commitments) – Student Privacy Pledge 2020 (8 controls), Commitments not to act (the six 'will not' commitments) – Student Privacy Pledge 2020 (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of Student Privacy Pledge 2020 do I already cover?

Student Privacy Pledge 2020 maps to 54 other compliance frameworks. The top mapping partners are Vietnam PDPD (6% coverage), Vietnam Law on Cybersecurity (No. 116/2025/QH15) (6% coverage), Vermont Data Privacy and Online Surveillance Act (6% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement Student Privacy Pledge 2020?

Start your Student Privacy Pledge 2020 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Student Privacy Pledge 2020 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 14 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.

Get Started Free →

Free forever, no credit card required