Virginia Student Data Privacy Legal Compliance Guide

Virginia Law ProvisionCompliant Microsoft Provision(s)
VA Code § 22.1-289.01(c)(1)
Restriction on targeted advertising
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services
VA Code § 22.1-289.01(c)(2)
Restriction on amassing user profile
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services
VA Code § 22.1-289.01(c)(3)
Restriction on sale of personal data for marketing or advertising purposes
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing to Provide Customer the Online Services

Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> California Consumer Privacy Act (CCPA)
VA Code § 22.1-289.01(d)(5)
Restriction on disclosure of personal data
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Disclosure of Processed Data

Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Nature of Data Processing; Ownership -> Processing for Microsoft’s Legitimate Business Operations
VA Code § 23.1-405
Compliance with FERPA
Microsoft Online Services Data Protection Addendum -> Data Protection Terms -> Educational Institutions