{"resourceId":"microsoft-ai-safety-privacy-standard-schools-available-all-us-districts-nov-1-2026","versions":[{"version":"external-3551c80abad0275f21ff667a905d60c34d5e42b90f727093970df855f75523f6","resource":{"id":"microsoft-ai-safety-privacy-standard-schools-available-all-us-districts-nov-1-2026","title":"Microsoft fact sheet: from Nov. 1, every US school district can add the AFT-agreed AI Safety & Privacy Standard protections to new or existing Microsoft agreements without renegotiation; 10 contractually enforceable protections","organization":"Microsoft (with the American Federation of Teachers)","sector":"K-12","geography":"United States","publishedAt":"Undated fact sheet; protections available from 2026-11-01","publicationDate":null,"eventDate":"2026-11-01","sourceName":"Microsoft","sourceLabel":"Vendor fact sheet (PDF)","sourceUrl":"https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/AI-Safety-and-Privacy-Standard-Fact-Sheet.pdf","evidenceClass":"vendor-claim","outcomeClass":"emerging","topics":["data-security","governance-procurement","accessibility-workforce"],"finding":"A Microsoft fact sheet on the AI Safety & Privacy Standard agreed with the American Federation of Teachers says that beginning Nov. 1, 2026, Microsoft will make the Standard's protections available to every US school district, which can add them to new or existing agreements with no renegotiation or renewal, and that the protections are contractually enforceable. It lists 10 protections, including no training on student or educator data (apart from a narrow safety and security exception), data minimisation, customer data ownership with no sale or advertising use, human review of high-risk decisions and a ban on AI companions, breach reporting within 72 hours, encryption and independent testing, plain-language family guides, accessibility commitments including funding an independent study, no feature creep or vendor lock-in, and permanent training and sale bans.","sledRelevance":"Takes effect Nov. 1, two days after this edition: districts using Microsoft AI can add enforceable student-data and safety terms. Cross-tagged to k12 because it applies to every US school district.","evidence":"Vendor-authored summary of contractual commitments. Contract language and enforcement mechanics were not reviewed; no independent assessment.","architectureImplications":"Commitments on feature control and data export may affect how new AI features are enabled in district tenants.","governanceImplications":"Districts gain contract terms on human oversight, transparency and feature control that can anchor board AI policies.","securityPrivacyImplications":"72-hour breach reporting, no-training and no-sale commitments, and deletion duties after contract end are concrete privacy terms to verify in the actual addendum.","caveats":"Vendor fact sheet, undated; the binding contract text was not inspected. Whether the protections cover all Microsoft AI products and how disputes are resolved is not shown. Applies to US districts only.","streamIds":["microsoft","k12"],"roles":{"sales":"From Nov. 1 districts can add the AFT-agreed protections to Microsoft agreements without renegotiating. That is a practical conversation starter: ask whether the district has reviewed the terms, who would sign, and how they will monitor compliance. Position help with contract review and board communication, not claims about safety outcomes. Be clear that this is a vendor fact sheet and that the binding contract language must be read before advising anyone.","engineering":"Engineers supporting districts should map the protections to tenant settings and processes: data minimisation, controls over new AI features, export and deletion, and incident-response contacts able to meet 72-hour breach reporting. Confirm which Microsoft AI products are in scope and how the no-feature-creep commitment works technically, for example through admin controls on feature rollout. Keep evidence that configuration matches commitments, so the district can demonstrate compliance if asked.","delivery":"Delivery work includes guiding districts through opt-in, updating the AI policy and family communications to reference the protections, and setting a compliance review routine: feature-change notices, breach-reporting drills and data-retention checks. Assign a district owner for the agreement. Track whether the promised plain-language family guides arrive and share them with schools. Revisit the routine annually as products and contract terms change, and report status to the board."},"roleDetails":{"sales":{"customerProblem":"Districts need enforceable student-data and safety terms for AI products from major vendors.","stakeholders":["Superintendent","District counsel","Director of technology","Teachers' union","School board"],"discoveryQuestions":["Have you reviewed the Standard's terms?","Who will sign the addendum?","How will compliance be monitored?","Which Microsoft AI products do you use with students?"],"valueHypothesis":"Opting in and operationalising the protections may strengthen trust with families and staff.","potentialEngagement":"Contract opt-in support and compliance-monitoring setup for the AI Safety & Privacy Standard.","unsupportedClaims":["The protections improve safety outcomes","Contract text details (not reviewed)","Coverage of every Microsoft product"]},"engineering":{"fit":"US districts using Microsoft 365 Education and Copilot.","architectureIntegration":"Mapping contract commitments to tenant controls and processes.","prerequisites":["Addendum text","Admin controls inventory","Incident-response plan"],"constraints":["Fact sheet only","US only"],"security":"Verify that no-training, deletion and breach terms are reflected in processes.","proofOfValue":["Tabletop a breach to test 72-hour reporting","Audit feature-rollout controls"]},"delivery":{"work":"Opt-in, policy update and compliance routine.","dependencies":["Legal review","Board approval if required"],"ownership":"District counsel with the technology director.","skillsAdoption":"Staff briefing on the protections and family guides.","governanceCheckpoints":["Addendum signed","Annual compliance review"],"acceptanceCriteria":["Proposed: addendum executed and policy updated within a term"],"risks":["Assuming protections without signing","Gaps between fact sheet and contract"]}},"retrievedAt":"2026-10-31T03:09:29Z","enrichedAt":"2026-10-31T03:21:01Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Includes accessibility and equity commitments and funding of an independent study.","procurementImplications":"Districts can attach protections to existing agreements without renewal, a low-friction contract action.","operatingModelImplications":"District legal and technology staff need a process to opt in and monitor compliance.","sourceVerification":{"openedUrl":"https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/AI-Safety-and-Privacy-Standard-Fact-Sheet.pdf","referenceExcerpt":"The protections are contractually enforceable if those commitments are not met.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}