FERPA

FERPA (Family Educational Rights and Privacy Act of 1974) is federal legislation in the United States that protects the privacy of students' personally identifiable information (PII). The act applies to all educational institutions that receive federal funds.

FERPA states that parents of students under 18, or eligible students (students over 18, or those who have matriculated to an educational institution above high school) be allowed to view and propose amendments to their educational records. The act also mandates that schools must obtain written permission from parents or eligible students in order to release a student's PII.

There are a few exceptions regarding who may receive records without written permission. Exceptions include:

• Legitimate requests from school officials.
• Requests from schools to which a student is transferring.
• Cases of 'directory information,' defined as "information contained in an education record of a student that would not generally be considered harmful or an invasion of privacy if disclosed," such as name, address, telephone number and date of birth.

In the case of directory information, the parents or eligible students must be notified of the proposed release of said information and given time to request their information not be disclosed. Social Security numbers and student identification numbers are not included in the category of 'directory information' and may never be released without written permission.

Schools must notify parents and eligible students annually of their rights under FERPA.

Learn More About IT:
> David Mortman explains 'How to prepare for a FERPA audit.'
> The U.S. Department of Education has more information about FERPA.
> Here are the full details of FERPA.

Learn more about Information Security Laws, Investigations and Ethics

Cyberwar: A threat to business: This tip profiles today's international cyberterrorists, and offers ways to guard enterprise networks against those attackers who thrive on the thrill of creating corporate chaos.
Security rules to live by: Compliance with laws and regulations: An excerpt of Chapter 3: Security Rules to Live By, from David J. Lineman's Information Protection Made Easy.
Steal this Computer Book 4.0: Prevent Google hacking: An excerpt from Chapter 8: Chapter 8: Stalking the Computer of "Steal this Computer Book 4.0," by Wallace Wang.
The Oversight Function
	Ensure that legal responsibilities are clear -- Especially when trouble strikes: Excerpt from Chapter 15 of Information Nation Warrior: Information Management Compliance Boot Camp.
If he had just paid the rent: In this excerpt of Chapter 3 from "High-Tech Crimes Revealed," author Steven Branigan introduces "Wesley" and the incidents that led to a computer forensics investigation.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

FILE EXTENSION AND FILE FORMAT LIST File Extension and File Format List: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z #

RELATED CONTENT Melissa Hathaway urges more cooperation, government attention to cybersecurity Former acting director for cyberspace Melissa Hathaway called for public-private cooperation on cybersecurity and pressed government to develop... Cybersecurity czar candidate questions clout of new position Former U.S. Congressman Tom Davis, a leading candidate for the White House cybersecurity czar, says the job has a number of major challenges to... DHS fills National Cybersecurity Center post Former Microsoft executive Philip Reitinger will lead the DHS' cybersecurity operations, filling a post vacated by Rod Beckstrom.

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary CALEA  (SearchSecurity.com) cyberstalking  (SearchSecurity.com)