

Children’s Data Privacy: PRC and U.S. State Law Updates for Colleges and Universities
Following a December 29, 2025 notice published by the Cyberspace Administration of China, institutions that handle personal information of children in China must report on their handling activities by January 31 each year (starting January 31, 2026); Several recently effective U.S. state comprehensive data privacy laws impact whether/how institutions may engage in targeted advertising to minors; The same U.S. state laws also impact whether/how institutions may “sell” minors’

Emma Bahner, XL Law & Consulting
2 days ago6 min read


Open Doors Report Shows Continued Increases in International Student Enrollment in the U.S. and U.S. Students Studying Abroad
International student enrollment at U.S. institutions during the 2023/24 academic year increased 7% from the previous academic year,...

Anne Wilder, XL Law & Consulting
Jan 10, 20253 min read


MOVEit Data Breach: Implications for Higher Ed Institutions
In late May 2023, cybercriminals gained unauthorized access to the personal information of IHEs’ students, employees, and other community...

Emma Bahner, XL Law & Consulting
Jul 27, 20238 min read

