Compliance Requirements for Online Educators

Online-education compliance depends on who you teach, what information you collect and whether you work directly with learners or through a school. An independent tutor, a children’s learning platform and a school contractor can face different requirements even when all three teach online.

• Teaching online does not automatically make every education law applicable.
• Student privacy rules depend on the institution, learner age and data relationship.
• Accessibility, content permissions and clear customer terms belong in the course-design process.
• An instructor’s worker status depends on the actual relationship, not the contractor label.

Identify the audience and business relationship before choosing a compliance checklist.

For questions involving children, school records or regulated educational programs, confirm the requirements with the relevant agency and an attorney familiar with education and privacy law. A CPA can address the business’s tax and worker-payment obligations.

List what learners provide and where it goes before adding more forms or software.

The inventory may include contact details, assignments, learning assessments, recordings, chat messages and payment information. Identify which vendors receive each category and whether a recording or identifier is necessary for the service.

Then decide who can access the information, how long it is retained, and how requests for access or deletion will be handled. Keep the privacy notice consistent with those decisions. The FTC’s personal-information guide provides a practical framework for reducing unnecessary data and securing what remains.

Recording a session also raises consent, contractual and privacy questions. Disclose the practice and obtain any required permission before recording or reusing material.

FERPA applies to covered educational agencies and institutions, not to every person who teaches.

The Department of Education’s FERPA guidance ties coverage to funds received under programs administered by that department. An independent tutor does not become a covered institution solely by keeping a student’s name or assignment.

A provider receiving records from a covered school still needs to examine the permitted disclosure basis and its contract. The FTC’s school-provider guidance also explains why school agreements must be reviewed under the relevant FERPA exception and why state student-privacy laws may add restrictions.

For example, the FTC identifies California’s Student Online Personal Information Protection Act as restricting certain uses of K–12 student information, including targeted advertising. A school relationship is not permission to reuse records for unrelated marketing.

A commercial online service involving children under 13 needs a separate COPPA analysis.

The current COPPA Rule covers operators of child-directed websites or online services and other covered operators with actual knowledge that they collect personal information from children under 13. Its requirements include appropriate notices and verifiable parental consent before collection, use or disclosure, subject to specified exceptions.

The current rule also requires separate consent for third-party disclosures unless those disclosures are integral to the service. It includes security-program and data-retention duties; children’s information cannot simply be retained indefinitely.

School consent has a limited role. FTC guidance allows reliance on school authorization in the educational context for the school’s use and benefit, not for unrelated commercial purposes. A provider cannot shift its COPPA responsibility to the school through a sentence in its terms.

Before launch, review the actual platform, analytics, advertising and vendor arrangements with counsel. An age question or generic privacy policy alone does not establish compliance.

Accessibility includes the learning materials and the path used to reach them.

Check captions, text alternatives for meaningful images, keyboard navigation, readable contrast, accessible forms and downloadable documents. Test enrollment and payment as well as the lesson player. The Justice Department’s web-accessibility guidance describes common barriers and the ADA’s coverage of public entities and businesses open to the public.

Keep the legal regimes distinct. Section 504 addresses disability discrimination by recipients of federal financial assistance. Section 508 addresses federal agencies’ information and communication technology. A private tutor is not automatically subject to Section 508 merely because teaching happens online.

Public-school contracts can specify additional technical requirements. Confirm the applicable standard and responsibility with the school rather than assuming that a platform’s accessibility badge resolves the whole issue.

CIPA is a funding-related requirement for covered schools and libraries, not a universal certification for online teachers.

USAC’s CIPA guidance connects compliance to specified E-Rate discounts, including internet access and Category Two services. Covered institutions have internet-safety policy and filtering obligations.

An independent tutor outside that funding arrangement should not be told to obtain a nonexistent general CIPA teaching license. A contractor working with a covered school should understand the school’s requirements and how the service fits them.

Educational purpose alone does not make copying lawful.

The Copyright Office’s fair-use guidance describes a case-specific assessment involving purpose, the work’s nature, the amount used and market effect. There is no universal safe number of pages, images or seconds.

Keep licenses and permissions for images, music, readings and software. Check whether a license permits commercial courses, recordings and redistribution to students. Agreements with instructors can also clarify ownership and future use of the content they create.

Clear terms help learners understand what they are buying and help the business administer the service.

Describe the course content, access period, cancellation terms, refunds and any certification accurately. Avoid implying accreditation, guaranteed employment or a regulated qualification unless those claims are supported.

For hired instructors, the IRS classification guidance examines behavioral control, financial control and the relationship. Working remotely or signing a contractor agreement does not settle the result. State employment tests may differ.

Use a CPA and employment adviser to determine the payment and reporting setup. Avoid reusing an old information-reporting threshold without checking the current rule.

Store the records that explain the business’s decisions and obligations.

Useful categories include customer terms, permissions, privacy notices, consent records, vendor agreements, accessibility work, instructor agreements and financial records. Retention periods should reflect the applicable requirement and purpose; keeping all student data forever is not a sound default.

The compliance planning guide can help organize responsibility and dates, while separate business finances support clear accounting.

Before adding children, school contracts or regulated credentials to an existing offer, confirm the new legal requirements with the relevant agency or counsel.

• FTC’s personal-information guide
• Department of Education’s FERPA guidance
• FTC’s school-provider guidance
• current COPPA Rule
• Justice Department’s web-accessibility guidance
• Section 504
• Section 508
• USAC’s CIPA guidance
• Copyright Office’s fair-use guidance
• IRS classification guidance