FERPA & COPPA Compliance
FERPA
The Family Educational Rights and Privacy Act (FERPA) is a federal law that affords parents the right to have access to their children’s education records, the right to seek to have the records amended, and the right to have some control over the disclosure of personally identifiable information from the education records. When a student turns 18 years old, or enters a postsecondary institution at any age, the rights under FERPA transfer from the parents to the student (“eligible student”). The FERPA statute is found at 20 U.S.C. § 1232g and the FERPA regulations are found at 34 CFR Part 99. https://studentprivacy.ed.gov/faq/what-ferpa
Below are a list of resources to learn more about FERPA:
- (FERPA) Family Educational Rights and Privacy Act
- Student Privacy 101: Student Privacy at the US Department of Education
- FERPA Frequently Asked Questions
- FERPA Guidelines for Parents and Students
COPPA
The Children’s Online Privacy Protection Act (COPPA) was enacted by Congress in 1998. COPPA required the Federal Trade Commission to issue and enforce regulations concerning children’s online privacy. The primary goal of COPPA is to place parents in control over what information is collected from their young children online. The Rule was designed to protect children under age 13, while accounting for the dynamic nature of the Internet. The Rule applies to operators of commercial websites and online services (including mobile apps and IoT devices, such as smart toys) directed to children under 13 that collect, use, or disclose personal information from children, or on whose behalf such information is collected or maintained (such as when personal information is collected by an ad network to serve targeted advertising). The Rule also applies to operators of general audience websites or online services with actual knowledge that they are collecting, using, or disclosing personal information from children under 13, and to websites or online services that have actual knowledge that they are collecting personal information directly from users of another website or online service directed to children.
Companies, vendors and others that the district works with must comply with COPPA.
The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online. For example, if your company is covered by COPPA, you need to have certain information in your privacy policy and get parental consent before collecting some types of information from kids under 13.
Below are a list of resources to learn more about COPPA:
Additional Websites and Resources Related to Student Privacy
- Federal Student Privacy Website
- Protecting Student Privacy While Using Online Educational Services
- Early Childhood Data Privacy