New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules
All enforcement actions
SettlementMedium Risk

NY AG Settles College Board for $750K Over Student Data Licensing

College BoardFebruary 13, 2024New York Attorney General

Penalty Amount

$750,000

Consumers Affected

237,000

Summary

College Board licensed student data to third parties and used it for marketing without proper consent, violating New York law. The settlement requires College Board to pay $750,000 and prohibits future commercial use of student data from school-administered exams.

Remedy

College Board must pay $750,000 in penalties and is prohibited from using New York student data for commercial purposes or soliciting students during exams.

Monetary PenaltyInjunction

Contract Impact

In-house legal teams should review all agreements where College Board collects or shares student data, including vendor contracts with schools/school districts, data processing agreements with third parties (e.g., colleges, scholarship programs), and marketing/service agreements. Key clauses to scrutinize are data licensing provisions, consent mechanisms for promotional use, restrictions on commercial exploitation of exam data, and any language permitting sharing of personally identifiable information from PSAT/SAT/AP exams. Changes needed include inserting explicit prohibitions against licensing student data for commercial purposes, requiring opt-in consent for any marketing use, ensuring compliance with New York education privacy statutes, and adding audit rights for schools to monitor data usage.

Contract Search Terms

student data licensing agreementthird-party data sharing clausemarketing consent requirementprohibition on data monetizationexam data use restrictionsschool district data contractAP exam data protectionPSAT/SAT data licensing termsscholarship program data sharingstudent privacy addendum

Violation Types

Entity Details

Entity

College Board

Industry

Education

Official Sources

Source Evidence

Entity Name
"College Board"
Fine Amount
"must pay $750,000 in penalties"
Violation Types
"College Board improperly licensed the information of more than 237,000 New York students"
Violation Types
"College Board improperly used student data for its own marketing"

Related Enforcement Actions

NY

Boston Children’s Health Physicians, LLP and XTIUM

$2.6M

New York and Connecticut reached a settlement with Boston Children’s Health Physicians and its IT security provider, XTIUM, after a 2024 breach exposed private information of approximately 825,000 New York residents and 62,871 Connecticut residents. The companies will pay $2.64 million and implement enhanced cybersecurity measures; additional penalties are conditional on violating the settlement.

NY

U.S. Department of Justice

New York Attorney General Letitia James joined 16 other attorneys general in urging Congress to pass proposed legislation addressing the federal government’s release of Jeffrey Epstein-related records. The press release says DOJ has not fully disclosed the records required by the original law and that personal information of at least 43 victims was exposed in released files; this is a legislative advocacy announcement, not an enforcement action imposing a penalty or remedy.

NY

DolGen New York, LLC and Dollar General Corporation

$1.9M

New York Attorney General Letitia James secured a settlement after an investigation found Dollar General stores routinely charged customers more than advertised or posted prices and issued confusing receipts. Dollar General must donate $1.875 million in food and personal items to Foodlink and implement pricing, receipt, training, and audit reforms.

NY

New York State Office of the Attorney General

New York Attorney General Letitia James released an updated guide warning voters that AI-generated election content and chatbots may provide misleading information. This is public guidance, not an enforcement action, and the release describes no penalty or privacy violation.

NY

Character Technologies, Inc.

New York Attorney General Letitia James and a bipartisan coalition of 39 other attorneys general filed a motion in Character Technologies, Inc.’s bankruptcy, citing risks to children and sensitive user information and potential violations of state privacy laws. The coalition asks the court, the company, and any prospective buyer to require meaningful privacy and safety protections; no fine or final remedy is reported.

NY

Martin Shkreli

New York Attorney General Letitia James, the FTC, and six other state attorneys general asked a federal court to hold Martin Shkreli in contempt for allegedly trading pharmaceutical stocks and discussing pharmaceutical companies in violation of his lifetime industry ban. The requested sanctions include divestiture, an accounting of his trading, forfeiture of trading profits, and possible further fines or incarceration; the release describes a request to the court, not a new ruling imposing those measures.