Compliance Reports: Family Educational Rights and Privacy Act (FERPA)

Document created by RSA Information Design and Development on May 25, 2016Last modified by RSA Information Design and Development on Apr 25, 2018
Version 144Show Document
  • View in full screen mode
 

The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99) is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.

Dependencies

The FERPA compliance reports have the following dependencies.

               
SA RulesApp Rules

Accounts Created

Accounts Deleted

Accounts Modified

Group Management

Password Changes

Password Changes Summary

User Access Revoked

Admin Access to Compliance Systems Details

Admin Access to Compliance Systems Summary

Access To Compliance Data Details

Access to Compliance Data Summary

User Access to Compliance Systems Details

User Access to Compliance Systems Summary

Logon Failures Details

Logon Failures Summary

Successful Escalation Of Privileges Details

Successful Escalation Of Privileges Summary

Change in Audit Settings

account:created

account:deleted

account:modified

account:group-management

access:user-access-revoked

account:password-change

account:logon-failure

config:change-audit-setting

access:privilege-escalation-success

account:logon-success

alm:cardholder-data

Citations

The FERPA reports have the following Citations.

                                                                                             
Report RuleCitation NumberCitation Description
Access to Compliance Data - Detail
Access to Compliance Data - Top 25
99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Accounts Created99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Accounts Deleted99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Accounts Modified99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Admin Access to Compliance Systems - Top 2599.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Admin Access to Compliance Systems - Detail99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Change in Audit Settings99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Escalation of Privileges - Detail
Escalation of Privileges - Top 25
99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Group Management99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Logon Failures - Detail99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Logon Failures - Top 2599.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Password Changes - Detail
Password Changes - Top 25
99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
User Access Revoked99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
User Access to Compliance Systems - Top 2599.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
User Access to Compliance Systems - Detail99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Account Management99.31(a)(1)(ii)Subpart D - May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records?
Previous Topic:Bill 198
You are here
Table of Contents > Rules and Reports > Core Compliance Reports > Family Educational Rights and Privacy Act (FERPA)

Attachments

    Outcomes