PogoWasRight.org

Menu
  • About
  • Privacy
Menu

U.S. Department of Education guidance: Under FERPA, students cannot be required to waive rights as condition of participation

Posted on September 7, 2018June 25, 2025 by Dissent

Hogan Lovells calls attention to an important guidance.

In November 2017, the U.S. Department of Education (ED) issued a letter clarifying student and parental rights under the Family Educational Rights and Privacy Act (FERPA) when a school uses online third-party service providers to deliver all or a portion of an educational program. In response to a parent’s complaint, ED concluded that a public charter school impermissibly required the parent to waive her rights under FERPA when, as a condition of enrollment, it required the parent to accept the specific terms and conditions set forth in an online service provider’s terms of use and privacy policy, which gave the service provider broad rights to use and distribute information about the child.

Read more on Hogan Lovells.

The U.S. Education Department guidance is below:

Agora Findings letter FINAL 11.2.17

Related posts:

  • EPIC Obtains FERPA Complaints from Education Department
  • Amassing Student Data and Dissipating Privacy Rights
Category: Featured NewsLawsU.S.Youth & Schools

Post navigation

← Senator Leahy Pursues Questions about Privacy with Judge Kavanaugh
Uber gets better about safety with ride checks and address anonymization →

Now more than ever

Search

Contact Me

Email: [email protected]

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

Categories

Recent Posts

  • DeleteMyInfo Wins 2025 Digital Privacy Excellence Award from Internet Safety Council
  • TikTok Loses First Appeal Against £12.7M ICO Fine, Faces Second Investigation by DPC
  • German court offers EUR 5000 compensation for data breaches caused by Meta
  • How to Build on Washington’s “My Health, My Data” Act
  • Department of Justice Subpoenas Doctors and Clinics Involved in Performing Transgender Medical Procedures on Children
  • Google Settles Privacy Class Action Over Period Tracking App
  • ICE Is Searching a Massive Insurance and Medical Bill Database to Find Deportation Targets

RSS Recent Posts on DataBreaches.net

  • McDonald’s McHire leak involving ‘123456’ admin password exposes 64 million applicant chat records
  • Qilin claims attack on Accu Reference Medical Laboratory. It wasn’t the lab’s first data breach.
  • Louis Vuitton hit by data breach in Türkiye, over 140,000 users exposed; UK customers also affected (1)
  • Infosys McCamish Systems Enters Consent Order with Vermont DFR Over Cyber Incident
  • Obligations under Canada’s data breach notification law
©2025 PogoWasRight.org. All rights reserved.