New York State Education Law §2-d Part 121 of the Commissioner’s Regulations requires that each educational agency shall publish a parent’s bill of rights for data privacy and security. The law also requires that with each contract an educational agency enters with a third-party contractor, that receives personally identifiable information (PII), must contain a signed bill of rights and supplemental information. In turn, each educational agency will have to publish, on its website, the signed parent’s bill of rights and supplemental information to the bill of rights for each software contract.