Securing the Nation’s Educational Technology
Summary
Never before have so many children in America used so much educational technology, and never before has it been so important to ensure that these technologies are secure. Currently, however, school administrators are overburdened with complex security considerations that make it challenging for them to keep student data secure. The educational technologies now common in America’s physical and virtual classrooms should meet security standards designed to protect its students. As a civil rights agency, the Department of Education has a responsibility to lead a coordinated approach to ensuring a baseline of security for all students in the American education system.
This policy initiative will support America’s students and schools at a time when educational experiences—and student information—are increasingly online and vulnerable to exploitation. The plan of action outlined below includes a new Department of Education educational technology security rule, training support for schools, a voluntary technology self-certification system, an online registry of certified technologies to help grow a secure educational technology market, and processes for industry support and collaboration in this work. Combined, these efforts will create a safer digital learning environment for the nation’s students and a more robust educational technology marketplace.
These fellows will be working to turn ambitious ideas into actionable policy – from improving how frontier AI models are evaluated for government use to strengthening biosecurity protections and building the workforce needed to keep AI systems safe.
AI’s high-stakes outputs directly shape American economic, industrial, and technological outcomes. They must not be accepted entirely on the basis of institutional faith rather than verifiable evidence.
The clearinghouse will also neutrally mediate the assignment of auditors to audits—strengthening independence, trust, and ethical governance across the AI ecosystem.
Soft law was never meant to be a permanent solution. Treating it as one, and letting the sandcastle stand in for the skyscraper indefinitely, is how we end up with a decade of voluntary commitments and no enforceable accountability to show for it.