The Family Educational Rights and Privacy Act protects student information and gives individual students certain rights pertaining to their education records. In terms of information security and protected data, FERPA designates most information about a student as “private,” meaning no one other than school officials (faculty and staff) with a legitimate educational interest may have access to it without the written consent of the student. Certain kinds of information designated as “directory information” may be disclosed by the educational institution without written consent.
Where does FERPA apply?
Individuals and departments handling student information should comply with FERPA.