California has several laws that protect student data privacy. Some of the key ones include:

1. California Student Online Personal Information Protection Act (SOPIPA): SOPIPA, enacted in 2014, prohibits operators of online services from knowingly using, disclosing, or compiling personal information about K-12 students for certain purposes, including advertising and marketing.

2. California Consumer Privacy Act (CCPA): While not specifically focused on student data privacy, the CCPA provides broad privacy rights and protections to California residents, including students, regarding the collection, use, and sharing of their personal information by businesses.

3. California Education Code Section 49073.1: This section requires school districts in California to adopt and implement policies for the use of technology in the classroom that protect student privacy and ensure the security of student data.

4. California Education Code Section 49073.6: This section requires school districts to notify parents and guardians about their rights regarding the collection, use, and disclosure of student data and provide them with the opportunity to inspect and correct student records.

5. California Privacy Rights for California Minors in the Digital World Act (SB 568): This law, also known as the "Eraser Law," requires operators of websites and online services directed at minors under 18 years old, including students, to provide them with the means to remove or request the removal of content they have posted.

These laws, among others, aim to ensure that student data is handled responsibly, securely, and in accordance with privacy best practices in California. Additionally, California's Attorney General and other state agencies may issue guidance or regulations to further clarify and enforce these privacy protections.