> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# US FERPA

> Protect the privacy of student education records under US federal law.

> Protect the privacy of student education records under US federal law.

The Family Educational Rights and Privacy Act (FERPA) is a US federal law that protects the privacy of student education records. It applies to schools and organizations that receive funding from the US Department of Education, granting parents and eligible students rights over education records.

<Note>
  FERPA applies to educational institutions and the EdTech vendors and service providers that handle student education records.
</Note>

## Who needs US FERPA?

<CardGroup cols={2}>
  <Card title="Educational institutions" icon="graduation-cap">
    Schools, colleges, and universities receiving US Department of Education funding.
  </Card>

  <Card title="EdTech providers" icon="laptop">
    Vendors processing student education records on behalf of institutions.
  </Card>
</CardGroup>

## Key components

<CardGroup cols={3}>
  <Card title="Access rights" icon="user-shield">
    Parents and eligible students can inspect and review education records.
  </Card>

  <Card title="Consent for disclosure" icon="square-check">
    Written consent is generally required before disclosing records.
  </Card>

  <Card title="Directory information" icon="address-book">
    Rules governing what may be disclosed as directory information.
  </Card>

  <Card title="Data safeguards" icon="lock">
    Reasonable methods to protect education records from unauthorized access.
  </Card>
</CardGroup>

## How DSALTA helps with US FERPA

<Steps>
  <Step title="Activate FERPA">
    Select FERPA from the Frameworks page. DSALTA maps requirements to privacy controls.
  </Step>

  <Step title="Review privacy controls">
    Review access, consent, and safeguard controls and assign owners.
  </Step>

  <Step title="Collect evidence automatically">
    Connect integrations to gather access and security evidence.
  </Step>

  <Step title="Approve privacy policies">
    Review and approve FERPA-aligned privacy policies.
  </Step>

  <Step title="Maintain compliance">
    Track consent records and disclosure logs.
  </Step>
</Steps>

## Frequently asked questions

<AccordionGroup>
  <Accordion title="Does FERPA apply to EdTech vendors?" icon="laptop">
    Vendors acting as 'school officials' under FERPA must protect education records and use them only for authorized purposes.
  </Accordion>

  <Accordion title="What rights does FERPA grant?" icon="user-shield">
    Parents and eligible students can access records, request corrections, and control most disclosures.
  </Accordion>
</AccordionGroup>

## Related pages

* [Active Frameworks](/guides/compliance/frameworks-active)
* [Available Frameworks](/guides/compliance/frameworks-available)
* [Controls](/guides/compliance/controls)
* [Audits](/guides/compliance/audits)
