FERPA Certification
The Family Educational Rights and Privacy Act
About the iKeepSafe FERPA Certification
School leaders look for educational technology that can be used in compliance with FERPA, applicable state laws, and local policies.
The iKeepSafe FERPA Certification demonstrates compliance with the federal mandates as well as iKeepSafe’s rigorous guidelines through the published Product Profile.
Benefits of Earning the iKeepSafe FERPA Certification
Get your technology into schools more easily.
Having the iKeepSafe FERPA certification ensures schools that they can rely on your product to adequately safeguard the privacy of student data.
Enable schools to reinforce their own compliance needs.
The comprehensive Product Profile gives schools the information they need to easily determine whether a product meets its own compliance thresholds around FERPA, state laws, school policies, and community norms.
Assessment Guidelines
-
Transparency
Each product must include a clearly written, accurate and easily accessible privacy policy explaining what data is collected from or about students, how the data is used and stored, and to whom it may be disclosed and why.
-
Control
Participating companies agree to act as school officials, but schools will remain in control of personally identifiable information from education records during and after any arrangement with a participating company. Participating companies may not provide third parties with students’ personal data for advertising, marketing, or other purposes unrelated to the functioning of the product in the manner for which it is being used by the school.
Participating companies must also have a process in place to respond to requests to provide parents or eligible students with a means to review data or categories of data that have been collected and to request that the data be amended or corrected.
-
Choice
Participating company products should be designed to operate with minimally required collection of student data. Participating companies must clearly identify to schools what data collection is required for basic operation of the technology and what is optional.
-
Security
Participating companies must take reasonable measures to maintain the confidentiality, security and integrity of data.
-
Education
Participating companies must maintain a baseline level of knowledge of data privacy and security requirements and best practices through annual employee training.
