Add this to your must-read list for today.
Dan Solove has a short article on LinkedIn that addresses what the FTC might do in the case where a school district enters into a contract with a cloud provider. Although the FTC generally has no authority over the education sector, they might take action against the business involved:
Although the FTC lacks enforcement power against most schools, government organizations, and non-profits when these entities have deficient contracts with businesses that handle personal data, the FTC can still go after the businesses that are operating under that contract. With schools in particular, some businesses are taking advantage of the fact that many schools lack the knowledge and resources to include the appropriate controls over data in their contracts. The FTC can step in and stop these practices.
Read Dan’s article here.