Obama’s Student Digital Privacy Act would stop companies from selling student data to third parties, except for educational purposes, and from using such data to create targeted advertisements. The act is modeled on a California initiative that will take effect in January 2016.
Another proposed piece of legislation is the Personal Data Notification & Protection Act. If passed, it will require companies to alert customers within 30 days of discovering a security breach regarding customer information. It is meant to simplify the current framework for data breach notifications, which varies state by state.