Legal/Ethical Issue in Higher Education by Laurie Kimball https://padlet.com/lkimball14/sd45ed48s87bliak Student Information Privacy en-us 2022-12-06 05:33:59 UTC 2026-02-22 16:22:04 UTC hello@padlet.com https://padlet.net/icons/png/1f3db.png lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410218038 2022-12-06 06:03:10 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410218038 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410219037 2022-12-06 06:04:19 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410219037 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410220387 2022-12-06 06:05:44 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410220387 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410221820 2022-12-06 06:07:21 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410221820 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410224133 2022-12-06 06:10:17 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410224133 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410227444 2022-12-06 06:14:45 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410227444 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410227974 2022-12-06 06:15:31 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410227974 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410228444 2022-12-06 06:16:09 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410228444 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410229202 2022-12-06 06:17:09 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410229202 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410230099 2022-12-06 06:18:07 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410230099 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410250267 2022-12-06 06:45:00 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2410250267 Topic - Student Information Privacy lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412054884 The Privacy Act of 1974 was what initially brought protections to student information and records. It established protections for Personally Identifiable Information (PII).  The Family Educational Rights and Privacy Act (FERPA) (1974) was established under the Department of Education in that same year to protect student information.]]> 2022-12-07 11:46:26 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412054884 Audience - Employees and Students in Higher Education lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412060655 While student privacy laws were initially created with K-12 schools in mind, they also included higher education under their umbrella, providing more structure for identifying, protecting, and sharing student information.]]> 2022-12-07 11:51:44 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412060655 Professional Perspective lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412061674 Student records should be defined; what is included in a student record?  The adult/owner of that record should be able to determine who has access to their personal records and information. This should be clearly explained to the student (and possibly the parent) during the application process in order to set up the records’ access appropriately from the start. There are situations, however, where access will be granted to other entities, such as SEVIS records for certain international students, records regarding outcomes of sexual assault, military access to recruitment information, and others as required by law (Stone, 2002). ]]> 2022-12-07 11:52:48 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412061674 References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412061999 Family Educational Rights and Privacy Act (FERPA), 20 U.S. Code § 1232g (1974).  20 USC 1232g: Family educational and privacy rights (house.gov)

Privacy Act, 5 U.S. Code § 552a (1974). https://www.govinfo.gov/content/pkg/USCODE-2018-title5/pdf/USCODE-2018-title5-partI-chap5-subchapII-sec552a.pdf 

Stone, K. (2002). Revisiting the purpose and effect of FERPA. Stetson University College of Law 23rd Annual National Conference on Law and Higher Education. February 2002. Microsoft Word - Revisiting the Purpose of FERPA.doc (stetson.edu) ]]> 2022-12-07 11:53:03 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412061999 U.S. Privacy Protections lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412064124 At the highest level, student information is governed through the US Department of Education. Complaints are handled through the Student Privacy Policy Office (SPPO), and the Chief Privacy Officer enforces compliance and penalties.]]> 2022-12-07 11:55:12 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412064124 State Privacy Protections lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412065379 Some privacy topics are governed through state laws in addition to the US laws.  In Texas, the Student Privacy Act (2017) is regulated through the State Board of Education (SBOE).  SBOE rules are part of the state agency rules known as the Texas Administrative Code, which are collected and published under the Secretary of State. These are enforced by the Texas Higher Education Coordinating Board (THECB).]]> 2022-12-07 11:56:34 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412065379 References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412065672 Family Educational Rights and Privacy Act (FERPA) (20 U.S. Code § 1232g; 34 CFR Part 99.60 - 99.67) eCFR :: 34 CFR Part 99 Subpart E -- What Are the Enforcement Procedures?

Student Privacy Act, Tex. Educ. Code § 32.151-157 (2017). EDUCATION CODE CHAPTER 32. COMPUTERS, COMPUTER-RELATED EQUIPMENT, AND STUDENT INFORMATION PROTECTION (texas.gov) ]]> 2022-12-07 11:56:53 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412065672 Federal Laws lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412066679
  • The Privacy Act of 1974 
    • Privacy Act, 5 U.S. Code § 552a (1974). https://www.govinfo.gov/content/pkg/USCODE-2018-title5/pdf/USCODE-2018-title5-partI-chap5-subchapII-sec552a.pdf 

    ]]>     2022-12-07 11:57:54 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412066679     State Laws lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412066909
  • Texas Student Privacy Act (2017)
    • Student Privacy Act, Tex. Educ. Code § 32.151-157 (2017).
    EDUCATION CODE CHAPTER 32. COMPUTERS, COMPUTER-RELATED EQUIPMENT, AND STUDENT INFORMATION PROTECTION (texas.gov)
    ]]>     2022-12-07 11:58:09 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412066909     Administrative Law lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412068790
  • General Education Provisions Act (GEPA) (2010)

    • contains provisions that are applicable to the majority of federal education programs administered by the U.S. Department of Education. Section 444 establishes FERPA.
    ]]>     2022-12-07 11:59:58 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412068790     References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412068969 Family Educational Rights and Privacy Act (FERPA), 20 U.S. Code § 1232g (1974).  eCFR :: 34 CFR Part 99 -- Family Educational Rights and Privacy

    General Education Provisions Act (GEPA) § 444 (2020). https://www.govinfo.gov/content/pkg/COMPS-732/pdf/COMPS-732.pdf ]]>     2022-12-07 12:00:05 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412068969     Case Laws lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412069787
    • Owasso ISD v Falvo (2002) determined that peer grading did not violate student privacy rights and helped further establish what does constitute protected information.
    • Gonzaga v Doe (2002) established that FERPA does not create rights that can be enforceable through Civil action for deprivation of rights 42 U.S. Code § 1983.
    ]]>     2022-12-07 12:01:02 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412069787     References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412070043 Civil Action for Deprivation of Rights 42 US Code § 1983 (1979). 42 U.S. Code § 1983 - Civil action for deprivation of rights | U.S. Code | US Law | LII / Legal Information Institute (cornell.edu)

    Gonzaga University v. Doe, 536 U.S. 273 (2002). Gonzaga Univ. V. Doe, No. 01-679. - Federal Cases - Case Law - VLEX 890305699

    Owasso Indep. Sch. Dist. No. I-011 v. Falvo, 534 U.S. 426, 122 S. Ct. 934, 151 L. Ed. 2d 896 (2002). Owasso Isd No. I-011 v. Falvo, 00-1073 - Federal Cases - Case Law - VLEX 886919768]]>     2022-12-07 12:01:18 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412070043     Federal Regulation or Mandate lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412070499 One overarching regulation or mandate for FERPA is The Privacy Act of 1974. It established a code of practices for the privacy of Personally Identifiable Information (PII) that extended beyond privacy acts of specific other sectors. This topic would likely also fall under a larger umbrella of Civil Rights. 
    Privacy Act, 5 U.S. Code § 552a (1974). ]]>     2022-12-07 12:01:44 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412070499     Local Administrative Policy lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412070996 One local policy that applies to the Privacy Act is the University of Texas at Tyler’s Handbook of Operating Procedures (HOP) 5.2.3 This policy informs individuals of their rights under FERPA and outlines what constitutes compliance with FERPA , The Texas Public Information Act and UTS 183, the UT System regulations. This policy sets the expectations at the specific location/college. (University of Texas at Tyler 5.2.3, 2021) ]]> 2022-12-07 12:02:17 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412070996 Strategy lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412072356 The legal and ethical liability on the part of my organization would include ensuring compliance as best we can. 

    I-Sight software lists 10 steps of compliance that ring true: 
    • 1. RAISE AWARENESS 
    • 2. CONFIRM THAT IT APPLIES 
    • 3. UNDERSTAND INFORMATION TYPES 
    • 4. UNDERSTAND PROVIDED RIGHTS 
    • 5. LEARN THE EXCEPTIONS 
    • 6. PICK COMPLIANT VENDORS 
    • 7. TRAIN YOUR STAFF 
    • 8. IMPLEMENT COMPLIANT POLICIES 
    • 9. ENCRYPT FILES AND EMAILS 
    • 10. IMPLEMENT OTHER TOOLS 

    With the top contributor to compliance and risk management being to raise awareness (I-Sight.org, 2022). 
    ]]>     2022-12-07 12:03:39 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412072356     Strategy lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412072667 Training for Stakeholders (US Department of Education, 2022).]]> 2022-12-07 12:04:02 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412072667 Strategy lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412072861 https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html

    Know the Exceptions

    FERPA allows schools to disclose those records, without consent, to the following parties or under the following conditions (34 CFR § 99.31):
    • School officials with legitimate educational interest;
    • Other schools to which a student is transferring;
    • Specified officials for audit or evaluation purposes;
    • Appropriate parties in connection with financial aid to a student;
    • Organizations conducting certain studies for or on behalf of the school;
    • Accrediting organizations;
    • To comply with a judicial order or lawfully issued subpoena;
    • Appropriate officials in cases of health and safety emergencies; and
    • State and local authorities, within a juvenile justice system, pursuant to specific State law. (US Department of Education, 2021).
    ]]>     2022-12-07 12:04:17 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412072861     References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073013 I-Sight.org. 2022. Ten key steps to FERPA compliance. https://www.i-sight.com/resources/ferpa-compliance-10-key-steps/ 

    The University of Texas System, UT System Policy Library. UTS 183 Maintenance of Education Records Subject to the Family Educational Rights and Privacy Act (FERPA). UTS 183 Maintenance of Education Records Subject to the Family Educational Rights and Privacy Act (FERPA) | University of Texas System (utsystem.edu)

    Under what conditions is prior consent not required to disclose information?   34 CFR § 99.31 (2022). eCFR :: 34 CFR 99.31 -- Under what conditions is prior consent not required to disclose information?

    US Department of Education. (2021). Family Educational Rights & Privacy Act. Family Educational Rights and Privacy Act (FERPA)

    US Department of Education. (2022, July 1). FERPA 101: For Colleges and Universities. FERPA 101: For Colleges & Universities | Protecting Student Privacy (ed.gov)

    UT Tyler. (2022).  The Office of the Registrar. UT Tyler Registrar | FERPA Tutorial | FERPA]]>     2022-12-07 12:04:25 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073013     References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073242 The University of Texas at Tyler. (2022) Handbook of Operating Procedures (HOP). Handbook of Operating Procedures | UT Tyler HOP | Faculty & Student Academic Policies

    The University of Texas at Tyler, Handbook of Operating Procedures (HOP) 5.2.3 Student Records Family Educational Rights and Privacy Act (FERPA) (2021). University of Texas at Tyler - 5.2.3 Student Records Family Educational Rights and Privacy Act (FERPA) (smartcatalogiq.com)

    The University of Texas System, UT System Policy Library. UTS 183 Maintenance of Education Records Subject to the Family Educational Rights and Privacy Act (FERPA). UTS 183 Maintenance of Education Records Subject to the Family Educational Rights and Privacy Act (FERPA) | University of Texas System (utsystem.edu) ]]>     2022-12-07 12:04:39 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073242     References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073355 Audiopedia. (2015, November 10), Privacy Act of 1974. [Video]. Privacy Act of 1974 - YouTube

    Privacy Act, 5 U.S. Code § 552a (1974).  Office of Privacy and Civil Liberties | Privacy Act of 1974 (justice.gov)]]>     2022-12-07 12:04:47 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073355     Ethical Principle lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073776 CAS Principle V - Fidelity
    We are faithful to an obligation, trust, or duty.
     
    • We maintain confidentiality of interactions, student records, and information related to legal and private matters
    • We avoid conflicts of interest or the appearance thereof
    • We honor commitments made within the guidelines of established policies and procedures
    • We demonstrate loyalty and commitment to institutions that employ us 
    • We exercise good stewardship of resources (CAS, 2022).
    ]]>     2022-12-07 12:05:15 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412073776     References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412074198 Bonde, S. and Firenze, P. (2013). A framework for making ethical decisions. Brown University. A Framework for Making Ethical Decisions | Science and Technology Studies (brown.edu) 

    Council for the Advancement of Standards in Higher Education (CAS), (2022). CAS Statement of Shared Ethical Principles. http://standards.cas.edu/getpdf.cfm?PDF=D67207DB-A711-46AA-86038F4A48ACF434 ]]>     2022-12-07 12:05:39 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412074198     Personal Connections lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412074896 When you work in the Registrar's office, data integrity is in the very definition of what you do, and FERPA is common.  However, I have never looked as deeply at FERPA as I have in this course.  Researching FERPA introduced me to the parents, grandparents and many of the cousins to this Act, and it provided a much larger legal context for:
    • what FERPA is
    • where it came from
    • what it is similar to
    • what has happened because of it
    • and what has happened to affect it 
    ]]>     2022-12-07 12:06:18 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412074896     References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412075031 Council for the Advancement of Standards in Higher Education (CAS), (2022). CAS Statement of Shared Ethical Principles. http://standards.cas.edu/getpdf.cfm?PDF=D67207DB-A711-46AA-86038F4A48ACF434 ]]> 2022-12-07 12:06:26 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412075031 Recommendations lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412075703 These are my take-aways for how to best be compliant with the FERPA laws in higher education:
    • Take the applicable ed.gov training courses so that you can know recent changes or additions
    • Train, train, train employees. Require periodic FERPA training for All staff.
      • reinforce the laws
      • reinforce the ethics
      • become an expert; know the do's and don'ts
    • Make it clearly aware with the incoming student/parent what the privacy law means for them.  Parents will not have any access unless the college student allows it. This can be for finances, grades, or other paperwork.
    • Post signage explaining FERPA as a refresher for students
    • Use de-identified data when possible.
    • Build your fidelity and maintain your integrity - maintain needed confidentiality
    ]]>     2022-12-07 12:07:06 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2412075703     lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2413733815 2022-12-08 02:18:35 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2413733815 References lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414089088 Privacy Act, 5 U.S. Code § 552a (1974). https://www.govinfo.gov/content/pkg/USCODE-2018-title5/pdf/USCODE-2018-title5-partI-chap5-subchapII-sec552a.pdf

    Student Privacy Act, Tex. Educ. Code § 32.151-157 (2017). EDUCATION CODE CHAPTER 32. COMPUTERS, COMPUTER-RELATED EQUIPMENT, AND STUDENT INFORMATION PROTECTION (texas.gov) ]]>     2022-12-08 09:28:20 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414089088     Federal Statute lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414100601
  • FERPA
    • Family Educational Rights and Privacy Act (FERPA), 20 U.S. Code § 1232g (1974). eCFR :: 34 CFR Part 99 -- Family Educational Rights and Privacy
    ]]>     2022-12-08 09:40:54 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414100601     lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414189258 2022-12-08 11:20:44 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414189258 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414207685 2022-12-08 11:41:14 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414207685 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414216532 UT Tyler Policy (University of Texas at Tyler, 2022) ]]> 2022-12-08 11:52:03 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414216532 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414219947 UT System policy (UTS 183, 2022)]]> 2022-12-08 11:56:13 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414219947 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414924521 Training for Specific Institutions (UT Tyler, 2022)]]> 2022-12-08 22:24:46 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414924521 Strategy lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414933270 Use De-Identified Data:

    • Best practices to reduce potential risks to student privacy, including, whenever possible, use of de-identified or aggregate data in place of Education Records or Personally Identifiable Information from Education Records (UTS 183, 2022).
    ]]>     2022-12-08 22:41:39 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2414933270     lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415043692 Required Periodic Training System-Wide UTS

    Ensure that all officers, faculty, staff, and any other individuals who will create and/or access the institution’s Education Records receive training to provide general information about FERPA prior to their initial access to System Education Records. In addition, all such individuals must receive periodic training that addresses the particular FERPA requirements that apply to the categories of Education Records they would be expected to access, create, or disclose (UTS 183, 2022).  ]]>     2022-12-09 01:24:59 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415043692     lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415061809 2022-12-09 01:46:11 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415061809 Ethical Framework lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415068474 The Duty Framework compliments FERPA (Bonde & Firenze, 2013).

    A Framework for Making Ethical Decisions | Science and Technology Studies (brown.edu)]]>     2022-12-09 01:54:34 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415068474     Connection lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415091886 Both the Principle and Framework revolve around Duty.  FERPA is a set of rules to follow regarding privacy, and to dutifully do the right thing will achieve the end goal.]]> 2022-12-09 02:19:06 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415091886 lkimball14 https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415107471 Connection with the ethical standards of this profession, using the Shared Principles from CAS, did not strike me as very different.  This may be because I already work in this field and realize the expectations of the office, and because these principles are already familiar.  Identifying them has been a good exercise because it can highlight principles that might not be used as much in this area yet are still important to the profession (CAS, 2022).]]> 2022-12-09 02:35:53 UTC https://padlet.com/lkimball14/sd45ed48s87bliak/wish/2415107471