Educational institutions around the world process and store student information using various forms of technologies. Technological advancements bring with them productivity and efficiency capabilities. However, they also bring important security concerns regarding confidential student information.
Compliance with FERPA
FERPA (the Family Educational Rights and Privacy Act) is a Federal law administered by the Family Policy Compliance Office in the U.S. Department of Education. FERPA applies to all educational agencies and institutions that receive funding under any program administered by the Department. Once a student attends a postsecondary institution, he or she becomes an “eligible student” with the following rights:
According to FERPA, an educational institution may not disclose personally identifiable information from an eligible student’s education records to a third party, unless the student provides written consent for the educational institution to do so.
Cloud Computing and FERPA
Are you considering cloud computing for your school’s information technology needs? FERPA doesn’t prohibit the use of cloud computing services, however it does require educational institutions use reasonable security measures to ensure the security of their student records.
Student information must be protected, particularly when cloud-based SaaS (Software as a Service) applications are used to handle student records. In addition, you must ensure FERPA compliance when using email services and CRM (Customer Relationship Management) systems to transmit and process student information.
Before signing up with a cloud provider, ask these questions:
Review and compare available solutions, including:
Don’t rush into a cloud services agreement. Review your options to find a cloud provider who offers adequate data protection.
Don’t Make These IT Mistakes
When it comes to FERPA and IT, educational institutions must prevent the following:
Fortunately, there are many types of information technology available today that can protect the confidentiality and integrity of student information. Educational institutions should discuss information security and student privacy with their IT provider to ensure compliance with FERPA.
To learn more about protecting confidential student information and FERPA compliance, give us a call at (713) 490-5000 or send us an email at info@citoc.com. CITOC can help you deploy the proper IT to ensure adequate security and privacy.