The Pandemic, Edtech, and the Tricky Subject of Service Providers and Processors

The European Union’s General Data Protection Regulation and the California Consumer Protection Act seem like ideal legislation to address privacy concerns that have arisen as a result of the increased use of education technology during the global coronavirus pandemic. Those laws’ application to edtech, however, requires untangling. This paper examines how both laws’ geographic reach, substantive scope, and treatment of principals and agents in the data lifecycle apply to edtech vendors. Be