Skip to main content
Protect the privacy of student education records under US federal law.
The Family Educational Rights and Privacy Act (FERPA) is a US federal law that protects the privacy of student education records. It applies to schools and organizations that receive funding from the US Department of Education, granting parents and eligible students rights over education records.
FERPA applies to educational institutions and the EdTech vendors and service providers that handle student education records.

​
Who needs US FERPA?

Educational institutions

Schools, colleges, and universities receiving US Department of Education funding.

EdTech providers

Vendors processing student education records on behalf of institutions.

​
Key components

Access rights

Parents and eligible students can inspect and review education records.

Consent for disclosure

Written consent is generally required before disclosing records.

Directory information

Rules governing what may be disclosed as directory information.

Data safeguards

Reasonable methods to protect education records from unauthorized access.

​
How DSALTA helps with US FERPA

1

Activate FERPA

Select FERPA from the Frameworks page. DSALTA maps requirements to privacy controls.
2

Review privacy controls

Review access, consent, and safeguard controls and assign owners.
3

Collect evidence automatically

Connect integrations to gather access and security evidence.
4

Approve privacy policies

Review and approve FERPA-aligned privacy policies.
5

Maintain compliance

Track consent records and disclosure logs.

​
Frequently asked questions

Vendors acting as ‘school officials’ under FERPA must protect education records and use them only for authorized purposes.
Parents and eligible students can access records, request corrections, and control most disclosures.