Procurement should demand operational privacy evidence and use the five-dimension audit rubric for comparison¶

Strategy · All strategies
Evidence · 2 claims (1 for, 1 mixed) · 1 study (1 qualitative), q2 · 0 of 1 report an effect size · 2 claims rest on one study

Description¶

For schools, administrators, and policymakers, the article recommends that "procurement should demand operational evidence rather than accepting the existence of a privacy policy as sufficient." Vendors should be required to specify collected fields, subprocessors, children's consent practices, AI uses, retention or training practices, and breach-notification timelines in plain language. Institutions can use the five audit dimensions from Table 2 as a lightweight comparison rubric, and regulation should be specific, since the K-12 consent advantage shows enforceable obligations raise disclosure quality on the dimensions they directly govern.

Design Implications¶

Context¶

Requirements¶

• Specific, visible, and enforceable regulatory requirements to improve targeted disclosure dimensions

Constraints¶

• A platform that clearly describes collection is not necessarily more transparent about AI or more accountable for breaches; privacy should not be treated as a single maturity score

Target Learners¶

• K-12 students
• higher-education and adult learners using audited EdTech platforms

Target Learning Goals¶

• Institutional governance of student data privacy and AI disclosure in EdTech procurement

Claims¶

• In a 48-platform policy audit, data-collection disclosure was strongest while AI and accountability disclosures were weak [+W]
• K-12 platforms scored higher on children's consent where regulation is explicit, but the advantage did not extend to AI disclosure or accountability [~W]

Related Strategies¶

• Establish AI-specific evaluation and accountability systems using independent audits, role-based dashboards, and privacy and equity safeguards
• Mask small table cells (fewer than five students) when publishing study data

Examples¶

-

Key Sources¶

• Meghna Manoj Nair, Rachel Greenstadt. (2026). "We'll Fix It Later": Education, AI, and the Deferral of Student Privacy in EdTech. New York University. https://arxiv.org/abs/2609.28137