Illinois — student data privacy
Student Online Personal Protection Act (SOPPA, 105 ILCS 85)
Illinois SOPPA requires every operator that contracts with a school to be listed publicly on the school’s website, sign a written DPA before any data is received, and notify the school within 30 days of a breach (the school then has 30 days to notify parents).
What LeagueForge does to comply
- Sign a written SOPPA DPA with each Illinois school or district before receiving any student data.
- Be listed on the school’s public website as a contractor that receives "school student records."
- No targeted advertising, no selling student data, no behavioral profiling.
- Notify the school within 30 days of a confirmed breach.
Parent & student rights
- Inspect and copy their child’s records on file with the operator.
- Request correction; we forward to the school which decides.
- Request deletion via the school.
Breach notification
Within 30 days of breach to the school; school has 30 days to notify parents.
Resources
Need help?
School administrators in Illinois can email privacy@leagueforge.gg for a ready-to-sign DPA pre-built for your state.