Federal Laws that Protect Students

nysed logo

Federal Laws that Protect Student Data

Family Educational Rights and Privacy Act (FERPA) – The foundational federal law on the privacy of students’ educational records, FERPA safeguards student privacy by limiting who may access student records, specifying for what purpose they may access those records, and detailing what rules they have to follow when accessing the data.

Student Records
Under the Family Education Rights and Privacy Act (FERPA), parents of students under age 18, and students or graduates age 18 or older, may review, obtain copies (for a nominal fee), and challenge the accuracy or fairness of the student’s educational records. Requests to review instructional materials should be directed to the building Principal. Upon receipt of such request, arrangements shall be made to provide access to such material to within 30 calendar days after the request has been received. Complaints should be forwarded to the Superintendent’s Office, 200 Division Avenue, Hicksville, NY 11801-4800. Subsequent complaints
may be filed in writing to:

The Family Education Rights and Privacy Act Office
Department of Education
330 Independence Avenue, S.W.
Washington, D.C. 20201.

Student Directory Information
The district has the option under FERPA of designating certain categories of student information as “Directory Information,” including a student’s name, address, telephone number, date and place of birth, major course of study, participation in schools activities and sports, weight and height if a member of an athletic team, dates of attendance, degrees and awards received, most recent school attended, photograph/image (still or moving), audio clips, grade level, email address and class roster.

Once FERPA notification is given by the district, the parent/guardian will have 14 days to notify the district of any objections they have to any of the “Directory Information” designations. If no objection is received, the district may release this information without prior approval of the parent/guardian. Once the parent/guardian provides the “opt out” notice, it will remain in effect after the student is no longer enrolled in the district. The district may elect to provide a single notice regarding both directory information and
information disclosed to military recruiters and institutions of higher education.

Protection of Pupil Rights Amendment (PPRA) – PPRA defines the rules states and school districts must follow when administering tools like surveys, analysis, and evaluations funded by the US Department of Education to students. It requires parental approval to administer many such tools and ensures that school districts have policies in place regarding how the data collected through these tools can be used.

Children's Online Privacy Protection Rule (COPPA) – COPPA imposes certain requirements on operators of websites, games, mobile apps or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.