Court Rules
All enforcement actions
SettlementMedium Risk

NY AG Settles College Board for $750K Over Student Data Licensing

College BoardFebruary 13, 2024New York Attorney General

Penalty Amount

$750,000

Consumers Affected

237,000

Summary

College Board licensed student data to third parties and used it for marketing without proper consent, violating New York law. The settlement requires College Board to pay $750,000 and prohibits future commercial use of student data from school-administered exams.

Remedy

College Board must pay $750,000 in penalties and is prohibited from using New York student data for commercial purposes or soliciting students during exams.

Monetary PenaltyInjunction

Contract Impact

In-house legal teams should review all agreements where College Board collects or shares student data, including vendor contracts with schools/school districts, data processing agreements with third parties (e.g., colleges, scholarship programs), and marketing/service agreements. Key clauses to scrutinize are data licensing provisions, consent mechanisms for promotional use, restrictions on commercial exploitation of exam data, and any language permitting sharing of personally identifiable information from PSAT/SAT/AP exams. Changes needed include inserting explicit prohibitions against licensing student data for commercial purposes, requiring opt-in consent for any marketing use, ensuring compliance with New York education privacy statutes, and adding audit rights for schools to monitor data usage.

Contract Search Terms

student data licensing agreementthird-party data sharing clausemarketing consent requirementprohibition on data monetizationexam data use restrictionsschool district data contractAP exam data protectionPSAT/SAT data licensing termsscholarship program data sharingstudent privacy addendum

Violation Types

Entity Details

Entity

College Board

Industry

Education

Official Sources

Source Evidence

Entity Name
"College Board"
Fine Amount
"must pay $750,000 in penalties"
Violation Types
"College Board improperly licensed the information of more than 237,000 New York students"
Violation Types
"College Board improperly used student data for its own marketing"

Related Enforcement Actions

NY

BCMB1 Trust, First Age LLC, NS194 LLC, Second Start LLC, and Southern MBA Trust

$240K

The New York Attorney General investigated a group of debt buyers for filing foreclosure actions seeking payment of long-expired mortgage debts. The companies agreed to pay $240,000 in penalties and more than $242,000 in consumer restitution, stop seeking payment of time-barred debts, and amend claims in pending foreclosure cases.

NY

BCMB1 Trust; First Age, LLC; NS194, LLC; Second Start, LLC; Southern MBA Trust, and their affiliates

$240K

New York Attorney General Letitia James reached an agreement with debt buyers that allegedly filed foreclosure lawsuits seeking payment on expired mortgage debt. The companies must pay $240,000 in penalties and more than $242,000 in restitution, and stop seeking expired payments in ongoing and future cases.

NY

NovaTechFx and AWS Mining Pty Ltd.

$6.0M

The New York Attorney General secured disgorgement settlements totaling $5,975,861 from four promoters of NovaTech and AWS Mining over fraudulent investment claims and an illegal pyramid scheme. The promoters were permanently banned from the securities, commodities, and cryptocurrency industries; the Attorney General separately asked the court to order NovaTech’s founders to pay $1.3 billion, which was not yet an order.

NY

T-Mobile USA, Inc.

$98K

New York Attorney General Letitia James secured a settlement after T-Mobile raised prices on plans it had advertised with a promise that prices would never change. T-Mobile must offer affected customers refunds and other benefits, honor price guarantees through at least 2029 for customers who remain, clearly disclose limitations on future guarantees, and pay New York $98,000.

NY

Boston Children’s Health Physicians, LLP and XTIUM

$2.6M

New York and Connecticut reached a settlement with Boston Children’s Health Physicians and its IT security provider, XTIUM, after a 2024 breach exposed private information of approximately 825,000 New York residents and 62,871 Connecticut residents. The companies will pay $2.64 million and implement enhanced cybersecurity measures; additional penalties are conditional on violating the settlement.

NY

U.S. Department of Justice

New York Attorney General Letitia James joined 16 other attorneys general in urging Congress to pass proposed legislation addressing the federal government’s release of Jeffrey Epstein-related records. The press release says DOJ has not fully disclosed the records required by the original law and that personal information of at least 43 victims was exposed in released files; this is a legislative advocacy announcement, not an enforcement action imposing a penalty or remedy.