State governments moved from early guidance to operational AI policies for schools and postsecondary institutions, according to a new Education Commission of the States overview. The report describes rising requirements for AI governance, with human decision-making, student AI literacy, and cybersecurity and privacy protections showing up as recurring priorities. The overview notes that several states now require formal policies governing acceptable AI use in public school districts and postsecondary institutions. It also describes growing attention to student well-being and the mitigation of risks such as deepfakes and cyberbullying. Cybersecurity and privacy compliance is also accelerating. The report cites state laws requiring recurring risk assessments for institutions connected to state systems and new mandates tied to digital safety. Taken together, the policy developments show an emerging compliance model: districts and colleges are being pushed to formalize AI use rules, train students and staff in AI literacy, and document safety and data protection practices.