⚑ ⚑ ⚑ MODPA · Md. Code Ann., Com. Law § 14-4601 et seq.

Is Your School
MODPA Ready?

14 school-focused questions evaluating your institution's MODPA compliance posture across applicability, student data governance, parental rights, vendor controls, and high-risk processing — producing a scored gap report and a prioritised remediation roadmap.

MODPA 2024 MODPA §14-4601 et seq. Student Data Focus MD AG Enforcement $10K per violation
No data collected — runs entirely in your browser
Institution Type
K-12 Public School
Charter School
Private / Independent School
School District / LEA
EdTech Vendor / Platform
Your Role
Principal / Head of School
Technology / IT Director
Privacy / Compliance Officer
Superintendent / District Admin
Legal / General Counsel
Select your institution type and role — your report framing and export title will adapt.
MODPA Scope Note: Maryland's Online Data Privacy Act (effective October 1, 2025) directly regulates controllers and processors of Maryland consumer data — and your EdTech vendors are directly in scope. Vendors processing student data at scale meet MODPA's thresholds regardless of your school's size. This assessment measures whether your school has the contractual protections, operational controls, and governance structures in place to enforce your vendors' MODPA obligations — and to fulfill your relevant obligations under FERPA (where applicable), COPPA, PPRA, and Maryland Education Article §4-131 (approved digital tools lists). A vendor out of compliance is a school exposed.

This tool is for educational and informational purposes only; it does not constitute legal advice or create an attorney-client relationship. Results are based on your self-reported answers and should not be relied upon as a compliance determination. Consult qualified privacy counsel for your organization. ERMITS LLC is a privacy and compliance technology company and does not provide this tool as legal counsel.

0 of 15 answered 0 / 110 pts
Please answer all 15 questions to generate your compliance report