FERPA
What is FERPA?
The Family Educational Rights and Privacy Act protects the privacy of student education records and gives parents and eligible students control over their information.
Terms that appear alongside ferpa
Each of these is named in at least one of the same controls as ferpa. The number is how many controls name both.
- glba 23 shared controls
- hipaa 23 shared controls
- ccpa 10 shared controls
- privacy law 10 shared controls
- consent 9 shared controls
- compliance 9 shared controls
- data subject 9 shared controls
- state privacy laws 8 shared controls
Frameworks that govern ferpa
What the standards actually require on ferpa
Requirements naming ferpa across 6 standards, quoted from the control text.
FERPA implementation status as of 2026. STATUTORY + REGULATORY BASE: 20 USC 1232g (Family Educational Rights and Privacy Act of 1974 - the Buckley Amendment) implemented by 34 CFR Part 99 with FINAL RULE revisions in 1988 + 1995 + 2008 + 2011 (major revisions...
FERPA-Status · FERPA Implementation Status, 2024-2025 Guidance and AI/Cloud Trends →Coordination positions ICDPA within the broader US and international privacy regulatory landscape. (1) Utah UCPA Template Parent: Iowa CDPA most closely follows Utah CDPA (UCPA effective 31 December 2023) template - shared narrow Sale definition + opt-out (NOT...
ICDPA-Coord-USStatePrivacy-UCPA-Template-VCDPA-CPA-CTDPA-Federal-FTC-GDPR-International · Iowa CDPA Coordination - Utah CDPA Template Parent + US State Privacy Patchwork + Federal Sectoral (HIPAA/GLBA/FCRA/FERPA/COPPA) + FTC Section 5 + GDPR + India DPDP + International →Section 4(4)(a) of Kentucky CDPA establishes the heightened consent requirement for sensitive data processing. (1) Section 2 Sensitive Data Definition - 8 Categories: (a) Racial or ethnic origin; (b) Religious beliefs; (c) Mental or physical health diagnosis;
KY-CDPA-Sensitive-Data-Affirmative-Consent-Race-Religious-Health-Genetic-Biometric-Children-Citizenship · Kentucky CDPA Sensitive Data + Affirmative Consent + Race/Ethnicity + Religious + Mental/Physical Health + Sexual Orientation + Citizenship/Immigration + Genetic + Biometric + Children's Data + Precise Geolocation (1,750 ft) + Section 4 Heightened Consent Standard →Exempts certain entities and data (state bodies, nonprofits in some cases, higher-education institutions, GLBA financial institutions, HIPAA covered entities/PHI, FCRA, FERPA, etc.).
CTDPA-42-516-EXEMPT · Entity and Data Exemptions →Security Dimension 8 Privacy per X.805 Clause 6.8: Privacy shields what could be inferred by watching activity on the network, for example websites visited by users + their geographic location + the IP addresses and DNS names assigned to devices inside a provi...
X805-Dim8-Privacy-Identification-Network-Activity-Personal-Information-Confidentiality · ITU-T X.805 Security Dimension 8 - Privacy + Identification of Network Activity + Personal Information Confidentiality + Subscriber Anonymity + Pseudonymity + Anti-Tracking + Location Privacy + Data Minimization + GDPR/CCPA Alignment →Determine applicability of the Nebraska Data Privacy Act (NDPA) per Neb. Rev. Stat. 87-1101 to 87-1124. The NDPA applies to any entity that: (a) conducts business in Nebraska or produces products or services targeted to Nebraska residents, (b) is not a small b...
NDPA-1 · Applicability, Scope, and Carve-Outs →Questions people ask about ferpa
What is FERPA?
Why is FERPA important for compliance?
Which compliance frameworks address FERPA?
Where can I learn more about FERPA?
See how FERPA applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.