Privacy / Student Records

Enactment of federal legislation, such as the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act (HIPAA), has significantly changed how colleges and universities maintain and release student records. These laws, in combination with state laws, establish who controls disclosure of records, the right to inspect and review them and regulates the ability to amend the records by students, parents or others. University administrators must balance federal and state laws in order to protect student privacy and prevent potential litigation issues.

Lock = Available only to members of the contributing organization.

Statutes

Regulations

Resource Pages

Publications

Comments from NACUA on the Draft Dear Colleague Letter Regarding Student Medical Records
NACUA, Oct 5 2015

Comments from Higher Education Associations on the Draft Dear Colleague Letter Regarding Student Medical Records
Higher Education Associations, Oct 13 2015

The Chief Privacy Officer in Higher Education (2015)
EDUCAUSE

Growing Demands for Public Records: How Should Boards Respond? Lock
2012, AGB, Rachel Levinson-Waldman, Robert O'Neil

Fighting Phishing, Pharming, and Other Cyber-Attacks: Coverage for High Tech Liabilities Lock
2010, Cherylyn J. Briggs, Jerold Oshinsky, Kenneth K. Lee, Lorelie S. Masters, URMIA

New Privacy and Security Laws Found in Unlikely Places Lock
2009, AGB, Pamela J. Bernard

Data Privacy Issues - Know Your Rights and Responsibilities
2008, Arthur McCombs, John L. Nicholson, NACUA, Vadim Schick

The Privacy Argument
ACUA, Chris Kyriakakis, May 7 2012, Sabrina Serafin

ACUTA Alert: Red Flag Requirements Will Help Fight Identity Theft
2008, ACUTA

ACUTA Alert: Federal Rules Governing Destruction of Electronically Stored Information
ACUTA, December 2006

Complying with COPPA: Frequently Asked Questions, FTC Bureau of Consumer Protection
July 2013

FTC Standards for Safeguarding Customer Information: Final Rule
May 2002

Guidance for Industry: Part 11, Electronic Records; Electronic Signatures -- Scope and Application
August 2003

Sensitive Data Exposure Incident Checklist
EDUCAUSE

The Fundamentals of Fundamental FERPA
June 2013, NACUA, Steven J. McDonald

The Family Educational Rights and Privacy Act (FERPA): A Legal Overview
Jody Feder, Nov 19 2013

Sensitive Data Exposure Incident Checklist
EDUCAUSE