EDUCAUSE Comments on Proposed FERPA Rules (May 23, 2011)


This May 23, 2011 letter to the Department of EDUCATION includes comments from EDUCAUSE on the Notice of Proposed Rulemaking to amend the Family Educational Rights and Privacy Act (FERPA). The comments address the role of third parties who hold personally identifiable information (PII) covered by FERPA to use "reasonable methods" to "destroy or return PII when no longer needed" and to "protect PII from redisclosure (and use by any other third party)".  The comments cite the efforts of the Higher Education Information Security Council (HEISC) to address effective practices and solutions on related topics.

The Department will review all of the comments received over the next several months and is expected to issue final regulations in late 2011 or early 2012.

Download Resources