Georgia Student Data Privacy Legal Compliance Guide

Georgia Law ProvisionCompliant Microsoft Provision(s)
GA Code § 20-2-666(a)(1)
Restriction on targeted advertising
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services

GA Code § 20-2-666(a)(2)
Restriction on amassing user profile
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services
GA Code § 20-2-666(a)(3)
Restriction on sale of personal data for marketing or advertising purposes
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services

Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> California Consumer Privacy Act (CCPA)
GA Code § 20-2-666(a)(4)
Restriction on disclosure of personal data
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Disclosure of Processed Data

Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing for Microsoft’s Legitimate Business Operations
GA Code § 20-2-666(b)(1)
Security procedures and practices
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Data Security -> Security Practices and Policies

See also Microsoft Online Services Data Protection Addendum -> Appendix A – Security Measures
GA Code § 20-2-666(b)(2)
Deletion of covered information
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Data Retention and Deletion
GA Code § 20-2-666(c)
Circumstances under which disclosure of covered information is permissible
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Disclosure of Processed Data