Determine whether procurement and AI regulation produce broader privacy-governance spillovers

Investigate whether longitudinal procurement requirements or AI-specific rules improve privacy-governance practices beyond the specific dimensions that those requirements directly regulate.

Background

The paper’s audit finds that regulatory pressure improves the dimensions it directly governs: K–12 platforms perform better on children’s consent, but not on AI disclosure or accountability. This raises the unresolved question of whether targeted procurement requirements or AI-specific regulation can generate broader improvements across other dimensions of EdTech privacy governance.

The authors explicitly identify longitudinal examination of this potential spillover as future work, making it a concrete unresolved research problem rather than a general aspiration.

References

Future work should track these dimensions longitudinally, especially as India’s DPDPA enforcement matures, and examine whether procurement requirements or AI-specific rules create spillover beyond the dimensions they directly regulate.

— "We'll Fix It Later": Education, AI, and the Deferral of Privacy in EdTech  (2609.28137 - Nair et al., 23 Sep 2026) in Section 5.4, Practical Implications