With students around the country back in school, it’s time for educators and education-focused technology (EdTech) service providers to pick up their pens and paper (or more likely their tablets), and brush up on requirements for protecting student data. Legislators in Arkansas, Delaware, Georgia, Maine, Maryland, New Hampshire, Oregon, and Washington worked to tighten student data privacy restrictions this legislative session, passing bills shortly before the bell rang and the legislators were dismissed. Following our summary of these new laws, we have outlined a few next steps for education institutions and EdTech service providers in these states, including reexamining and potentially updating current policies and procedures as may be required by these new state laws.