FERPA Compliance IT

Comprehensive assessment of how your district or institution handles student education records — where they are stored, who has access, how they flow between SIS, LMS, and ed-tech vendors, and where FERPA exposure exists. We deliver a prioritized remediation plan aligned with U.S. Department of Education guidance.

Implement role-based access controls that restrict education records to school officials with a legitimate educational interest. We integrate with your identity provider, enforce least-privilege access, and document the directory information determinations required under FERPA.

Draft and operationalize your directory information policy — defining what may be disclosed without consent, how opt-outs are captured, and how requests are handled. We align the policy with Texas Education Code and district board requirements so it holds up under parental scrutiny.

Review ed-tech vendors, SaaS tools, and cloud services for FERPA alignment. We draft school official or study exception agreements, ensure vendor contracts restrict re-use of student data, and maintain a vendor inventory that district leadership can actually audit.

Maintain the record of disclosures required under FERPA — who accessed which student records, when, and why. We deploy audit logging across SIS, LMS, and file shares and produce the disclosure records parents are entitled to upon request.

Incident response playbook tailored to education — ransomware on student records, accidental disclosure through shared calendars, compromised staff credentials, and ed-tech vendor breaches. We handle containment, parent notification drafting, and communication with the Family Policy Compliance Office.