U.S. Department Of Education Releases Guidance On Protecting Student Information While Using Online Educational Services

Last month, the U.S. Department of Education released guidance on the proper use, storage and security of student data being generated by new online educational resources. Published by the Department’s new Privacy Technical Assistance Center, the guidance titled “Protecting Student Privacy While Using Online Educational Services: Requirements and Best Practices” provides answers to certain questions regarding schools’ and school districts’ obligations to protect student information under the Family Educational Rights and Privacy Act (FERPA) while using online educational resources. The Department also offers its best practices for using online educational resources. The Department generally advises that schools’ obligations under FERPA largely depend on the specific type of online educational resource being used.

For example, the Department states that whether student information used in online educational services is protected by FERPA depends on the particular type of online educational service being used. Certain types of online educational resources do not require that any personally identifiable information be disclosed, such as programs that allow students to complete interactive exercises without requiring a student to log in. Other resources, however, allow students and their parents to log in and access class materials, in which students’ names and contact information would need to be disclosed in order to set up student accounts. If personally identifiable information is disclosed to an online provider, schools and school districts must either: (1) obtain parental consent (or student consent if the student is 18 or over); or (2) ensure that the disclosure meets one of FERPA’s exceptions to the written consent requirement or constitutes the release of “directory information.” The Department notes that the “school official” exception may be applicable for certain disclosures.

The Department also recommends various best practices to schools and school districts when using online educational resources, such as:

  • Maintain awareness of other relevant federal, state, tribal or local laws, including the Children’s Online Privacy and Protection Act.
  • Be aware of which online educational services are currently being used in your district.
  • Have policies and procedures to evaluate and approve proposed online educational services.
  • When possible, use a written contract or legal agreement between the school and the online educational resource provider.
  • Use caution and take extra steps before accepting “Click-Wrap” licenses for consumer apps.
  • Be transparent with parents and students.
  • Consider whether parental consent is appropriate in certain circumstances.

Written by:

Published In:

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Franczek Radelet P.C. | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »

All the intelligence you need, in one easy email:

Great! Your first step to building an email digest of JD Supra authors and topics. Log in with LinkedIn so we can start sending your digest...

Sign up for your custom alerts now, using LinkedIn ›

* With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name.