WeVote
Log In

Bill

Bill

SB 930

Student Test Taker Privacy Protection Act: end-to-end encryption.

2025-2026 Regular Session Introduced by Eloise Reyes

Requires end-to-end encryption for online proctoring in K–12 exams to protect student data and limit information collection to what is strictly needed.

From committee: Do pass and re-refer to Com. on ED. with recommendation: To consent calendar. (Ayes 15. Noes 0.) (June 16). Re-referred to Com. on ED.
#studenttesttakerprivacyprotectionact #end-to-endencryption
0
WeVote Research Nonpartisan
Bill Summary · SB 930

Overview

SB 930, introduced by Senator Reyes (Co-sponsor: Eloise Reyes) in the 2025-2026 California Legislature, would require end-to-end encryption for proctoring services used in K–12 classroom- or course-based exams. The bill amends the Business and Professions Code to strengthen privacy protections around personal information collected, used, or disclosed by businesses providing online proctoring services to local educational agencies (LEAs), including school districts, county offices of education, and charter schools.

Main purpose and intent

  • Enhance student privacy by mandating end-to-end encryption (E2EE) for proctoring services.
  • Align proctoring practices with the broader goals of the California Privacy Rights Act (Proposition 24) by limiting data exposure and ensuring encryption from the sender to the recipient.

Key provisions and changes

  • Required encryption: If a business provides proctoring services to an LEA for classroom- or course-based exams, it must use end-to-end encryption to provide those services.
    • “End-to-end encryption” is defined as data being encrypted on the sender’s device and remaining unreadable by any other party, including the proctoring business, until it reaches the intended recipient’s device.
  • Narrowly scoped data handling: The business must collect, use, retain, and disclose only the personal information strictly necessary to provide proctoring services.
  • Permitted disclosures and exceptions: The bill allows disclosures of personal information when necessary to comply with federal, state, or local laws; court orders or subpoenas; regulatory inquiries; cooperation with law enforcement or government emergency requests (under specified conditions); and to defend legal claims.
    • Specific safeguards include: retaining information for up to 90 days upon law enforcement direction to obtain a court order/subpoena, and restrictions on further use or disclosure while retention is directed.
  • Definitions:
    • “Local educational agency” includes school districts, county offices of education, and charter schools.
    • “Personal information” has the same meaning as in Civil Code section 1798.140.
    • “Proctoring services” covers services to observe, monitor, or administer an exam.
  • Legislative findings: The act explicitly states that it furthers the purposes and intent of the California Privacy Rights Act of 2020 (Proposition 24).

Who would be affected

  • Businesses that provide proctoring services to LEAs for classroom- or course-based exams would be required to implement E2EE and limit data handling to what is strictly necessary.
  • LEAs (school districts, county offices of education, and charter schools) that contract with proctoring providers would gain stronger privacy protections for student data during exams.

Procedural and timeline aspects

  • Legislative process timeline (as provided): Introduced January 29, 2026; referral to committees; subsequent readings and amendments; passed the Senate and moved to the Assembly in spring 2026; action history shows committee votes and floor actions through May 2026.
  • No fiscal appropriation is requested in the bill, meaning it does not include an explicit state budget appropriation for implementation.

Potential impact

  • Enhanced protection of student personal information during online exam proctoring.
  • Increased technical requirements for proctoring providers to implement E2EE, potentially affecting cost, vendor selection, and implementation timelines for LEAs.
  • Clarified scope and permissible data uses, reducing unnecessary data exposure while preserving necessary functionality for exam integrity and compliance.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.