Education-agency and school staff are legally and ethically responsible for safeguarding student information. In addition to federal and state laws and regulations, education agencies need policies and procedures to guide their everyday information-maintenance operations. This document provides examples of policies and procedures as well as guidelines for deciding what is needed to ensure the privacy of student information. Section 1 provides an overview of the issues and discusses important concepts and terminology used throughout the document. Section 2 describes federal laws protecting the privacy of students that have implications for the maintenance and release of student data by state and local education agencies. The third section describes appropriate procedures for collecting individual information about students. Section 4 explains the management controls and policies needed to maintain and use data within the agency or school. It also addresses the issue of assessing who in an agency or school has a "legitimate educational interest" in specific information about an individual student. The fifth section describes procedures for providing access to a student's education record by the eligible student or the parent. The final section suggests procedures for handling external requests to release information from individual school records. The appendices contain the text of key federal rules and regulations. A topical index, section summary, an index of commonly asked questions, and 22 exhibits are included. Each section includes references, an overview, commonly asked questions, and guidelines. (LMI)

The primary purpose of this document is to help state & local education agencies & schools develop adequate policies & procedures to protect information about students & their families from improper release, while satisfying the need for school officials to make sound management, instructional, & service decisions. Sections include: a primer for privacy; summary of key federal laws; protecting the privacy of individuals during the data collection process; securing the privacy of data maintained & used within an agency; providing parents access to their child's records; & releasing information outside an agency. 5 appendices.

Designed to protect the privacy of individual student test scores, grades, and other education records, the Family Educational Rights and Privacy Act (FERPA) of 1974 places limits the access of educational researches, and slows research not only in education but also in related fields, such as child welfare and health. Recent trends have converged to greatly increase the supply of data on student performance in public schools. Education policies now emphasize education standards and testing to measure progress toward those standards, as well as rigorous education research. At the same time, private firms and public agencies, including schools, have replaced most paper records with electronic data systems. Although these databases represent a rich source of longitudinal data, researchers' access to the individually identifiable data they contain is limited by the privacy protections of FERPA. To explore possibilities for data access and confidentiality in compliance with FERPA and with the Common Rule for the Protection of Human Subjects, the National Academies and the American Educational Research Association convened the Workshop on Protecting Student Records and Facilitating Education Research in April 2008.

Designed to protect the privacy of individual student test scores, grades, and other education records, the Family Educational Rights and Privacy Act (FERPA) of 1974 places limits the access of educational researches, and slows research not only in education but also in related fields, such as child welfare and health. Recent trends have converged to greatly increase the supply of data on student performance in public schools. Education policies now emphasize education standards and testing to measure progress toward those standards, as well as rigorous education research. At the same time, private firms and public agencies, including schools, have replaced most paper records with electronic data systems. Although these databases represent a rich source of longitudinal data, researchers' access to the individually identifiable data they contain is limited by the privacy protections of FERPA. To explore possibilities for data access and confidentiality in compliance with FERPA and with the Common Rule for the Protection of Human Subjects, the National Academies and the American Educational Research Association convened the Workshop on Protecting Student Records and Facilitating Education Research in April 2008.