Replaces everything after the enacting clause. Creates the Student Online Personal Protection Act. Prohibits the operator of an Internet website, online service, online application, or mobile application (with actual knowledge that the site, service, or application is used primarily for K through 12 school purposes and was designed and marketed for K through 12 school purposes) from knowingly (1) engaging in targeted advertising on the operator's site, service, or application or targeting advertising on any other site, service, or application if the targeting of the advertising is based on any information that the operator has acquired because of the use of that operator's site, service, or application for K through 12 school purposes; (2) using information created or gathered by the operator's site, service, or application to amass a profile about a student, except in furtherance of K through 12 school purposes; (3) selling or renting a student's information; or (4) disclosing certain information, except for specified purposes. Sets forth an operator's duties, permissive uses or disclosure, those operator actions that are not prohibited, and what the Act does not do. Provides that the violation of the Act shall constitute an unlawful practice under which the Attorney General may take appropriate action under the Consumer Fraud and Deceptive Business Practices Act. Amends the Consumer Fraud and Deceptive Business Practices Act to make conforming changes. Effective immediately.