Educational software and applications are quickly becoming a common tool in the classrooms at home, but in the state of California, one lawmaker is looking to tighten up the security practices of the education and technology software industry.

A new bill sponsored by Senator Darrell Steinberg aims to forbid the operators of software and applications from using student data for other than educational benefit. Using the information to market or other commercial purposes would be prohibited.

California was the first state to drum up a law that requires companies to account data breaches and report them. The senator is looking to prevent businesses from abusing student information, like names, ages and location, even more explicitly family financial information or lunch preferences.

Education software has been rapidly adopted by educational facilities, however, lawmakers and advocates feel that regulation has failed to keep up with this speed. Currently, a federal law in place known as Family Educational Rights and Privacy Act (FERPA), puts limits on the disclosure of students’ educational records by schools that receive federal funding, however advocates feel there are still too many loopholes still make students susceptible to greedy marketing practices.

In New York State, scrutiny is being placed on Common Core, to the point where New York legislative leaders urged state officials to delay for two years the use of Common Core-aligned tests in teacher-employment and student-placement decisions, citing the “flawed rollout” of the new learning standards.

The Senate and Assembly leaders said the state also should delay plans for a statewide student database to third-party vendors like inBloom until the state addresses concerns about privacy and security.

New York is the only state that is still planning on disclosing a complete statewide student data set with inBloom and via inBloom to third party data dashboard vendors, however the New York State Department of Education won’t upload student data to the inBloom database until at least April, Capital New York reports.

While this is different scenario than using educational software, the bottom issue is the same; people are uncomfortable with how data will be shared and used, particularly when it comes to their children’s information.

James P. Steyer, the chief executive of Common Sense Media, a children’s advocacy group based in San Francisco, said to the New York Times “We messed up the privacy of kids, and probably adults too, in the online commercial, consumer space because we weren’t prepared for the extraordinary pace of technology Now we have the opportunity to get it right in the school space.”