Remote exam proctoring software records students through a webcam, and some products use AI to flag behavior that might signal cheating. Two official documents show how far that surveillance can go: a federal judge in Ohio ruled in August 2022 that a university's scan of a student's bedroom before an online exam was an unreasonable search under the Fourth Amendment, and Ontario's Information and Privacy Commissioner reported on February 28, 2024 that McMaster University had given students inadequate notice and had a deficient contract with its proctoring vendor. Neither document bans proctoring, and the Ohio ruling had a limited reach.
Key takeaways
- In Ogletree v. Cleveland State University, the court held that a room scan before a remote exam was a Fourth Amendment search and that the university had not justified it.
- The remedy covered only the student who sued, and the Sixth Circuit later vacated the decision on procedural grounds after the plaintiff died, according to a 2025 law review article.
- Ontario's privacy commissioner found that collecting data through the AI-based proctoring tool was authorized, but that notice and the vendor contract fell short.
- A University of Ottawa study funded by the federal Office of the Privacy Commissioner found that the conditions of consent for proctoring tools do not support free, clear, and individual consent.
- Questions about retention, human review of flags, and alternatives to surveillance apply to any institution using these tools.
What proctoring tools do
Proctoring software falls into two groups. A lockdown browser limits what a student can open on the computer during a test. A monitoring product records audio and video and analyzes it for possible cheating. In summaries of the Ontario commissioner's report, one such pair of products is described, and the monitoring product is said to collect more sensitive information, including biometric data, and to use AI technology, which raises heightened concerns. The University of Ottawa study, supported by the federal privacy commissioner's research program, describes a market in which most tools use AI techniques such as data mining and facial recognition to flag behavior that might indicate cheating.
The Ohio ruling on room scans
Aaron Ogletree took a General Chemistry II exam remotely on February 17, 2021, because of health concerns. The proctor asked him to show his bedroom, and the scan lasted roughly 10 to 20 seconds. The scan and the exam were recorded and stored by a third-party vendor, and other students could view room scans. The university had no written policy requiring them. The amended opinion and order of December 20, 2022 by Judge J. Philip Calabrese of the Northern District of Ohio explains the reasoning, which came in an original opinion on August 22, 2022.
The court held that the scan was a search, because a person has a reasonable expectation of privacy in the home, including a bedroom. It then weighed four factors. The privacy interest was strong and the intrusion, though short, was uneven in how it was applied. The university's interest in test integrity was legitimate, which the student conceded. On effectiveness, the court found little evidence beyond deterrence and pointed to other safeguards, such as proctors, lockdown browsers, recording, AI monitoring, and projects or papers in place of exams. The privacy interest outweighed the university's.
The relief was narrow. The court declined to extend the declaration to other students and barred the university from subjecting Ogletree to a room scan without a reasonable alternative or his express consent. A district court decision does not bind other courts. The Sixth Circuit later vacated the decision after the plaintiff died in February 2023, so it is not a live precedent, according to a Penn State Law Review article posted in May 2025 that cites the appeals court's order of December 4, 2023. That vacatur rested on a procedural ground, not a ruling on the Fourth Amendment analysis, and the order itself was not retrieved for this article. The ruling is best read as one court's reasoning that was later set aside.
The Ontario privacy report on McMaster
The Information and Privacy Commissioner of Ontario issued report PI21-00001 on February 28, 2024, after a McMaster student complained in January 2021 about the university's use of the Respondus proctoring products. According to the commissioner's decision record and law-firm summaries of the report, collection of the information was authorized under section 38(2) of Ontario's Freedom of Information and Protection of Privacy Act because the tool needed it to work. McMaster had not given adequate notice under section 39(2), its use of the data did not comply with section 41(1), and the contract did not adequately protect the information and let the vendor use recordings to improve its system without students' consent.
A summary by the law firm WeirFoulds lists recommendations: clear and accessible notices, contract limits on a vendor's use of personal information to improve or train algorithms, and added guardrails. Those guardrails included an algorithmic impact assessment, engagement with affected groups, opt-outs where possible, human oversight to validate AI-generated decisions, and confirmation that the vendor's training data was lawfully obtained. The report itself could not be opened by automated tools, so these details rest on those summaries.
What the Ottawa study added
Céline Castets-Renard of the University of Ottawa led the research project, published in 2022 through the federal Office of the Privacy Commissioner's contributions program. It found that vendors use the information they collect for secondary purposes, including improving their AI tools, and that students' consent is gathered under conditions that do not make it free, clear, and individual. Many vendors are US-based, which complicates control over data transfers and retention. Divided oversight between public-sector and private-sector privacy laws also makes outsourcing companies hard to classify. This is research, not an enforcement decision.
The two documents side by side
| Question | Ohio court | Ontario commissioner |
|---|---|---|
| Legal basis | US Fourth Amendment, public university | Ontario privacy statute for public institutions |
| Technology at issue | Webcam room scan | Lockdown browser and AI-based video monitoring |
| Main finding | An unreasonable search for this student | Collection authorized, notice and contract inadequate |
| Binding reach | One student; later vacated on appeal (reported) | A report with recommendations to one university |
Questions to ask about any proctoring tool
- What exactly is recorded, who can view it, and how long is it kept?
- Is a flagged event reviewed by a person before it affects a grade or an integrity case?
- Is an alternative offered, such as an in-person exam, a project, or an oral assessment?
- Does the vendor contract bar use of recordings to train or improve its systems without consent?
- Was an impact assessment completed, and is a summary available to students?
This article summarizes court and regulator documents for general information. It is not legal advice, and it does not recommend or rank any product.
FAQ
Does AI proctoring prove that a student cheated?
No. The tools flag possible cheating, and the law-firm summary of the Ontario report stresses human oversight to validate AI-generated decisions. A flag is a prompt for review, not a finding.
Are room scans now illegal in the United States?
Not as a general rule. One district court ruled for one student, the decision does not bind other courts, and it was reportedly vacated by the Sixth Circuit in December 2023 on procedural grounds.
Can a student ask for an alternative to being monitored?
The Ohio injunction protected one student's right to an alternative or to give consent. Whether others have that option depends on the institution's policy, so the policy is the place to check.
Does the Ontario report apply outside Ontario?
It is a report to one university under an Ontario statute. Its reasoning on notice and contracts may interest other institutions, but it does not set rules for other provinces.
Related reading
- documented negative effects of AI in education
- challenges and limits of classroom AI
- what AI could change in schools
- current trends in AI for education
More in AI in education.
Last verified: October 2026
Sources
- Ogletree v. Cleveland State University, Amended Opinion and Order, US District Court, Northern District of Ohio, Case No. 1:21-cv-00500, December 20, 2022
- Privacy Complaint Report PI21-00001 (McMaster University), Information and Privacy Commissioner of Ontario, February 28, 2024
- Online exam proctoring software during the pandemic: the quest to minimize student privacy risks, University of Ottawa project, Office of the Privacy Commissioner of Canada Contributions Program, 2022
- Privacy and AI: key takeaways from Ontario IPC's investigation on the use of AI tools, WeirFoulds LLP, April 30, 2024
- University that scanned student's room during remote test violated Fourth Amendment, judge rules, ABA Journal, August 25, 2022
- The Constitution and Online Exams: A New Fourth Amendment Take on Ogletree v. Cleveland State University, Penn State Law Review, May 2025