In this IAPP white paper, Emily Cramer, CIPP/US, offers a comparative analysis of the U.S. and EU children's data protection frameworks for the education technology industry, addressing the particular differences between obtaining consent under the EU General Data Protection Regulation and the Children's Online Privacy Protection Act and Family Educational Rights and Privacy Act in the U.S. "While complying with the GDPR can be difficult, in reality, the consent requirements under the GDPR for edtech are very similar to the U.S. framework for children’s privacy," Cramer writes. There are, however, some important differences — particularly for edtech companies acting as controllers.
Full Story