FERPA & HECVAT

FERPA

The Family Educational Rights and Privacy Act of 1974 (FERPA), also known as the Buckley Amendment, is a Federal law of the United States of America’s Department of Education. It defines education records and aims to protect privacy of education records by establishing that parents and students have specified rights regarding the access and use of those records. FERPA applies to educational institutions (public schools and state or local education agencies) that receive Federal education funds, and it protects both paper and computerized records. An educational institution “provides educational services or instruction, or both, to students”; whereas an educational agency “is authorized to direct and control public elementary or secondary, or postsecondary educational institutions.”

Our whitepaper on FERPA can be download at here.

HECVAT

The HECVAT (and Toolkit) was created by the Higher Education Information Security Council Shared Assessments Working Group to provide a starting point for the assessment of vendor-provided services and resources for higher education institutions. The HECVAT attempts to generalize higher education information security and data protections and issues for consistency and ease of use.