[ GLOSSARY ]
What is a data retention policy?
Definition
Law and privacyData retention policy
A data retention policy states how long each kind of data is kept, why, and when and how it is deleted.
Why it matters for schools
For children's data, retention is a legal requirement: COPPA's amended rule bars keeping a child's data indefinitely and requires a written retention policy with purposes and deletion timeframes. The FTC has said it is unreasonable to keep children's data for speculative future uses. For AI chats, set separate windows for raw chats, learning records, audit logs and backups.
[ FAQ ]
Questions and answers
How long should schools keep student AI chats?
As briefly as their purpose allows. Set separate windows for raw chats, learning records, audit logs and backups, in writing.
Does COPPA require a retention policy?
Yes, for children under 13: a written policy with purposes and deletion timeframes.
Can a vendor keep data in case it is useful later?
The FTC has said keeping children's data for speculative future uses is unreasonable.
[ SOURCES ]
Sources
Facts checked Oct 18, 2026.
- 1Federal Register, amended COPPA Rule (90 FR 16918)Apr 22, 2025 · govinfo.gov
- 2FTC, policy statement on education technology and COPPAMay 19, 2022 · ftc.gov
[ AI FOR SCHOOLS ]
The AI your school can approve.