Identify all systems that are holding student data
Ensure that all student data are properly classified according to FERPA guidelines
Establish a privacy policy related to student data
Train all personnel on the FERPA guidelines and regulations
Identify the need for consent in data collection and use
Draft a consent collection plan based on FERPA regulations
Approval: Consent Collection Plan
Implement the consent collection plan
Create procedures to ensure that the rights of the students are upheld
Ensure that all exceptions where consent is not required are properly documented
Implement security measures to protect student data
Test systems for FERPA compliance
Approval: FERPA Compliance Test Results
Revise systems found to be non-compliant
Monitor ongoing compliance with FERPA
Address violations of FERPA regulations
Investigate any suspected or reported non-compliance issues
Approval: Investigation Results
Make necessary changes based on compliance audits and investigations
Review and update FERPA regulations as necessary