SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

What must institutions maintain according to FERPA?

1. The right to speak with parents freely

2. The privacy and confidentiality of a student's education records

3. The ability to share records with all staff

4. The right to review all student records

The correct answer is: The privacy and confidentiality of a student's education records

According to the Family Educational Rights and Privacy Act (FERPA), institutions are required to maintain the privacy and confidentiality of a student's education records. This law protects the privacy of student education records and grants students certain rights concerning those records. Specifically, students have the right to access their records, request corrections, and control the disclosure of personally identifiable information from their records. Maintaining the privacy and confidentiality of education records is crucial because it fosters a safe learning environment, encourages student trust, and ensures compliance with legal standards that protect sensitive information from unauthorized access or disclosure. Institutions are thus mandated to implement policies and practices to uphold these privacy rights, which includes restricting access to educational records to only those individuals who have a legitimate educational interest.