[CaptainHaplo]

August - simple answer.

Make them sign for it - stating in the case of loss they are responsible for the cost of the device. Also in the agreement of issuance - note that there are security capabilities built in (you don't have to define them) but note that they will never be activated UNLESS the laptop is reported stolen or lost through a specific process.

If a student doesn't report it and doesn't turn it in - they pay for it. If they report it stolen - you can then activate the security features legally. Such capabilities can be laptop lo-jack, remote video capability, etc.

That way - if the device is EVER activated without it being reported lost or stolen - then the person activating those features is responsible for any privacy violations.