The U.S. Department of Education’s Privacy Technical Assistance Center (PTAC) published guidance on February 25 to assist schools, districts, and third-party online educational service vendors in complying with provisions of the Family Educational Rights and Privacy Act (FERPA). The general guidance can also be applied to education researchers’ use of student data.
Much of the guidance focuses on how providers of mobile apps, software, and web-based tools that students use in the course of instruction should protect students’ personally identifiable information (PII). PTAC states that student PII should not be used beyond the specific purpose for which it is disclosed and that it should not be shared or sold. PTAC also provides best practices to schools and districts for protecting student privacy, which include: