Under the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), which regulates the collection, use and disclosure of personal information, Ontario school boards are accountable for the information management practices of their educators. [...] The Information and Privacy Commissioner of Ontario (IPC) oversees MFIPPA and has been actively engaged in raising awareness with boards and educators about the privacy risks of online educational services. [...] Last year, we worked with the Ontario Association of School Business Officials to develop a brochure-style information handout about the privacy risks of using some online services in the classroom.1 We recommended that educators exercise caution before agreeing to use online educational services on behalf of their students and school boards. [...] The IPC participated in the 2016 GPEN Sweep when we reviewed eight health care apps under the broad theme of “Internet of Things.” This year, the 2017 GPEN Sweep theme was “user control over personal information.” The IPC worked with the Office of the Privacy Commissioner of Canada (OPC) to design and carry out a review of online educational services. [...] We wanted to understand the transparency practices of these services (that is, whether they inform educators and students how they collect, use and disclose personal information), and how much effective control educators and students can exercise over their information that is collected, used and disclosed by the service provider and third parties.