A two-year investigation in Utah revealed that many EdTech apps used in schools collect and share student data in ways that contradict their privacy agreements. The study assessed 100 apps and found that 52% collected unauthorized student data and 61% shared data with third parties, including 36% that transmitted data to advertisers. The audits demonstrated that traditional privacy policies often do not reflect actual app behaviors. Following the investigation, Utah enacted H.B.
55, requiring stricter data privacy measures in vendor contracts. This situation emphasizes the necessity for schools to monitor app behaviors beyond just relying on privacy policies.