9. Education

Question 1

What is FERPA?

Answer 1

Family Educational Rights and Privacy Act

ensures privacy protections for students and their education records. This includes academic, disciplinary and financial records and applies to all education institutions that receive federal funding.

Question 2

What are the 4 hey components of FERPA?

Answer 2

1. Notice
2. Consent
3. Access and Correction
4. Security and Accountability

Question 3

What are the Notice components of FERPA?

Answer 3

• Students should receive annual notices of their rights
• Education records are directly related to students and include academic, disciplinary and financial information that has been recorded in hard copy or electronic form

Question 4

What are the Consent components of FERPA?

Answer 4

Disclosure of education records is permitted if one of the following is met:
• Information is not personally identifiable.
• Directory information has not been blocked by the student.
• Written consent has been given by the parent. The right to consent transfers to the
student when they turn 18, at which time parents cannot access records without the
student’s permission.
• Statutory exception applies, such as health or safety purposes.
• Disclosure is to a student or parent (if a student is under 18 or has consented).

Question 5

What are the Access and Correction components of FERPA?

Answer 5

Students have the right to:
• Access, inspect and review their personal information held by their school
• Request corrections or updates to their personal information
• Request a hearing if a request to make a correction or update is denied

Question 6

What are the Security and Accountability components of FERPA?

Answer 6

• Students and applicable parents are given the option to opt out or block the release
of directory information
• Social security numbers or student ID numbers are excluded from directory
information
• Complaints can be filed with the U.S. Department of Education

Question 7

What is COPPA?

Answer 7

Children’s Online Privacy Protection Act

1. Relates to websites and services targeted to children
2. Requires clear notice of data collected
3. Requires parental consent to collect PI of children under 13