School Newsletter Legal Requirements: What You Must Know Before You Send

School newsletters are subject to a patchwork of federal laws, state regulations, and district policies that most teachers and principals have never read in full. The good news is that most of the legal requirements are straightforward to meet once you know what they are. The problems typically come from unintentional violations, such as using student photos without proper releases or sending newsletters through platforms that do not handle data correctly.
This guide covers the federal baseline and the most common state-level requirements. It is not legal advice. For specific situations, consult your district's legal counsel.
CAN-SPAM basics for school email
The CAN-SPAM Act applies to commercial electronic messages. Most school newsletters are not commercial, meaning they do not promote a product or service for profit. A newsletter about what the class is learning this week is not subject to CAN-SPAM.
However, if your newsletter includes a fundraiser ask, a paid event promotion, or advertising from a local business, those elements are commercial. To stay on the right side of CAN-SPAM for those cases, your newsletter should include: a physical mailing address for the sender, a clear identification of who sent it, and a working unsubscribe mechanism. Including these elements in every newsletter footer is the simplest approach.
FERPA and student privacy in newsletters
FERPA protects education records, which are defined as records directly related to a student maintained by the school. A newsletter mention that "our class is studying fractions this week" does not implicate FERPA. A newsletter mention that "Johnny Brown received a 90 on his fractions test" does, because it connects a specific student to academic performance information.
The practical rule for newsletters is to use first names only when highlighting students, avoid connecting any individual student to academic progress or behavioral information, and never share information that was communicated to you in an IEP or 504 meeting.
Photo release requirements
Using student photos in newsletters requires a valid photo release form on file for each student pictured. Most schools collect photo releases at the start of each school year as part of enrollment paperwork. Before using a student photo, confirm the release was signed and includes permission for digital distribution (email newsletters distributed digitally may have different requirements than photos in a printed newsletter, depending on how your release form is worded).
If any student in the photo does not have a signed release, either crop the image to exclude them or choose a different photo. Some schools photograph classroom activities from behind or at an angle that does not identify individual students; this avoids the release requirement entirely.
State-level student data privacy laws
More than 40 states have enacted student data privacy laws since 2014. The most common requirement is that schools must sign a data processing agreement with any third-party technology vendor that receives or stores student-related data. For newsletter platforms that only receive parent email addresses (not student data), this requirement may not apply. For platforms that store student names or grade levels alongside email addresses, it likely does.
California's SOPIPA and Student Privacy Pledge signatories are the most widely referenced frameworks. Check whether any newsletter platform you use has signed the Student Privacy Pledge, which is a public commitment not to use student data for advertising or sell it to third parties.
What your newsletter footer should include
A compliant school newsletter footer typically includes: the school's name and physical address, the name of the person or role responsible for the newsletter, a link to the school or district privacy policy, and a clear unsubscribe mechanism. These elements cost nothing to include and protect both families and the school.
District policies override everything else
Federal law sets the floor. State law adds requirements on top of it. District policy may be stricter than either. Before adopting any new newsletter platform or changing how you use photos or student information, check your district's communication policy and technology use agreements. The legal risk from a newsletter usually comes from violating district policy rather than from federal or state law directly, because districts are typically more specific about what teachers can and cannot include.
Get one newsletter idea every week.
Free. For teachers. No spam.
Frequently asked questions
When do federal email laws apply to school newsletters?
CAN-SPAM applies to any commercial email, and most school newsletters are not commercial. However, if your school newsletter includes promotional content, fundraiser solicitations, or third-party advertisements, it may cross into commercial territory and require a physical address, clear identification of the sender, and a functional unsubscribe mechanism. When in doubt, include these elements regardless of whether your newsletter is technically commercial.
What FERPA rules affect school newsletter content?
FERPA protects student education records, which include identifying information that connects a student to academic performance, discipline, or other personally identifiable details. You cannot include a student's full name alongside specific academic or behavioral information in a newsletter without prior consent. First names only, general descriptions of class activities, and photos of groups (with a photo release) are generally within the safe zone.
How should schools format newsletter data disclosures to comply with state privacy laws?
State laws like California's SOPIPA and similar statutes in other states require schools to disclose how student data collected through third-party ed-tech tools is used. If your newsletter platform stores student-related data, your school's privacy policy should reference it. Include a link to your school or district privacy policy in your newsletter footer. This applies to the newsletter platform itself, not just the content.
What mistakes do schools make that create legal exposure in newsletters?
The two most common are including student photos without a valid photo release form on file and sharing identifiable student information in a newsletter that goes beyond the school community to external recipients. A third is using a newsletter platform that shares or sells subscriber data without a signed data processing agreement, which can create FERPA liability for the school.
How does Daystage handle the legal compliance requirements that affect school newsletters?
Daystage includes a functional unsubscribe link in every newsletter, stores no student education records, and does not share or sell subscriber data. The platform gives you control over what goes into each newsletter, but the legal responsibility for content choices (like photo use and student identification) remains with the school. Daystage provides the compliant delivery infrastructure; the school provides the compliant content.

Adi Ackerman
Author
Adi Ackerman is a former classroom teacher and curriculum writer with 8 years in K-8 schools. She writes about school communication, parent engagement, and what actually works in real classrooms.
More for Guides
Ready to send your first newsletter?
3 newsletters free. No credit card. First one ready in under 5 minutes.
Get started free