Dozens of states have approved or considered legislation toughening students-data privacy laws, and those policies are likely to have an effect on the strategic decisions and product development of ed-tech providers.