Microsoft's School AI Deal Has Rules Canada Could Borrow
Matthew Mbaka · September 15, 2026 · News
Microsoft has agreed to school AI rules that are meant to be enforceable, not just displayed on a policy page.
The agreement was announced on September 9, 2026 with the American Federation of Teachers and its New York City affiliate. It applies to US school districts that add the protections to their Microsoft customer agreements. It does not automatically protect students in Canada.
That limitation matters. Still, the document gives Canadian school boards a useful starting point for their own contracts.
What the agreement covers
Under the standard, Microsoft commits not to use student or educator data to train AI models, sell it or repurpose it. Schools are supposed to keep control over how data is collected, retained and deleted.
It also calls for human oversight of AI decisions, safeguards against manipulative experiences, plain-language explanations for families and notice when products or risks change. US districts that put the terms into their contracts can use ordinary contract remedies if Microsoft breaks them.
That last part is the difference between a principle and a control. A privacy promise is much easier to ignore when the customer has no audit right, no deletion deadline and no remedy.
What Canadian boards should copy
A Canadian board should not copy the US document word for word. Provincial education rules, public-sector privacy laws and procurement terms differ. The stronger ideas can still become clear questions during a purchase.
1. Draw the data map first
The board should know what the product receives: student prompts, uploaded work, voice recordings, behavioural data, device details and staff conversations. It should also know which subcontractors receive any of it and where the information is stored.
2. Ban secondary use in the contract
"We protect your privacy" is vague. The contract should say whether school data can train a model, improve a product, target advertising or build profiles. If the answer is no, write no.
3. Put people back into high-stakes decisions
An AI tool can help organize work. It should not quietly make the final call on discipline, disability support, grading, safety flags or access to a program. The agreement's human-oversight rule is most useful when the contract names the decisions that require review.
4. Set deletion and exit rules
A board needs a deadline for deleting data after a student leaves, a class ends or the contract is cancelled. It also needs a usable export of records before access disappears.
5. Require notice when the product changes
AI services can change faster than a school procurement cycle. The vendor should disclose material changes to data use, model providers, safety controls and available features before the change reaches classrooms.
6. Add audit and incident rights
Schools should be able to ask for security evidence, test whether promised controls work and receive prompt notice of an incident. A contract should also explain what happens if the vendor fails the test.
Parents still need plain answers
A family should not need to read a software licence to learn whether a child's essay, voice or personal details can improve a commercial AI model.
A practical notice should name the tool, its purpose, the information it receives, whether use is required, how long data stays, who can access it and how a parent or student can challenge a decision. That is a more useful transparency test than a link to a general privacy policy.
Do not mistake this for a Canadian rule
The agreement is a US labour and customer-contract development. It is not a new Canadian law, and Microsoft is the company that signed it. Other education vendors have not automatically accepted the same terms.
Canadian boards can use it as leverage: if Microsoft can offer firm limits on training, tracking and automated decisions to US schools, Canadian customers can ask why equivalent protections are missing from their contracts.
Sources: The AFT's September 9 announcement, the linked standard fact sheet and The Verge's reporting on how US districts can add the terms to Microsoft agreements.
Tags: Microsoft, education technology, student privacy, Canada