nerdexam
IAPP

CIPP-US · Question #23

Which act violates the Family Educational Rights and Privacy Act of 1974 (FERPA)?

The correct answer is A. A K-12 assessment vendor obtains a student's signed essay about her hometown from her school. The Family Educational Rights and Privacy Act of 1974 (FERPA) is a federal law that protects the privacy of student education records. FERPA grants parents or eligible students the right to access, amend, and control the disclosure of their education records, with some exceptions

Sector-Specific Laws

Question

Which act violates the Family Educational Rights and Privacy Act of 1974 (FERPA)?

Options

  • AA K-12 assessment vendor obtains a student's signed essay about her hometown from her school
  • BA university posts a public student directory that includes names, hometowns, e-mail addresses,
  • CA newspaper prints the names, grade levels, and hometowns of students who made the quarterly
  • DUniversity police provide an arrest report to a student's hometown police, who suspect him of a

How the community answered

(36 responses)
  • A
    83% (30)
  • B
    11% (4)
  • C
    3% (1)
  • D
    3% (1)

Explanation

The Family Educational Rights and Privacy Act of 1974 (FERPA) is a federal law that protects the privacy of student education records. FERPA grants parents or eligible students the right to access, amend, and control the disclosure of their education records, with some exceptions. Schools must obtain written consent from the parent or eligible student before disclosing any personally identifiable information from the education records, unless an exception applies. Option A violates FERPA because it involves the disclosure of a student's personally identifiable information (PII) from the education records without consent. A student's signed essay about her hometown is considered an education record under FERPA, as it is directly related to the student and maintained by the school. A K-12 assessment vendor is not a school official with a legitimate educational interest, nor does it fall under any of the exceptions that allow disclosure without consent. Therefore, the school must obtain the student's (or the parent's, if the student is a minor) written consent before providing the essay to the vendor for public release. Option B does not violate FERPA because it involves the disclosure of directory information, which is not considered PII under FERPA. Directory information is information that would not generally be considered harmful or an invasion of privacy if disclosed, such as name, address, phone number, e- mail address, major, etc. Schools may disclose directory information without consent, unless the parent or eligible student has opted out of such disclosure. However, schools must notify parents and eligible students of the types of directory information they designate and their right to opt out Option C does not violate FERPA because it involves the disclosure of information that is not part of the education records. FERPA only applies to education records that are directly related to a student and maintained by the school or a party acting for the school. A newspaper's publication of the names, grade levels, and hometowns of students who made the quarterly honor roll is not based on the education records, but on the newspaper's own sources and reporting. Therefore, FERPA does not prohibit such disclosure. Option D does not violate FERPA because it involves the disclosure of information under an exception that allows disclosure without consent. FERPA permits schools to disclose education records, or PII from education records, without consent to comply with a judicial order or lawfully issued subpoena, or to appropriate officials in connection with a health or safety emergency. If the university police provide an arrest report to the student's hometown police in response to a subpoena or to prevent a serious threat to the student or others, they are not violating FERPA.

Topics

#FERPA#educational records#third-party vendors#student privacy

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice