Maryland Student Data Privacy Legal Compliance Guide

Maryland Law ProvisionCompliant Microsoft Provision(s)
MD Educ. Code § 4-131(d)(1) (2015)
Restriction on targeted advertising
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services

MD Educ. Code § 4-131(d)(2) (2015)
Restriction on amassing user profile
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services
MD Educ. Code § 4-131(d)(3) (2015)
Restriction on sale of personal data for marketing or advertising purposes
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services

Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> California Consumer Privacy Act (CCPA)
MD Educ. Code § 4-131(d)(4) (2015)
Restriction on disclosure of personal data
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Disclosure of Processed Data

Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing for Microsoft’s Legitimate Business Operations
MD Educ. Code § 4-131(h)(2) (2015)
Circumstances under which disclosure of covered information is permissible
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Disclosure of Processed Data
MD Educ. Code § 4-131(c)(2) (2015)
Security procedures and practices
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Data Security -> Security Practices and Policies

See also Microsoft Online Services Data Protection Addendum -> Appendix A – Security Measures
MD Educ. Code § 4-131(c)(3) (2015)
Deletion of covered information
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Data Retention and Deletion