News and Updates

  • New: a video providing cybersecurity best practices for schools and districts
  • New: a video providing best practices for responding to ransomware attacks
  • New: a recorded webinar on cybersecurity and incident response
  • Updated: a crosswalk comparing the provisions of FERPA and IDEA

Student Privacy for...

Frequently Asked Questions

Student Privacy Matters


The Department of Education (Department) is required to notify annually each State educational agency (SEA) and each local educational agency (LEA...


Letter to institutions of postsecondary education regarding the applicability of the Family Educational Rights and Privacy Act (FERPA) to the...


This letter is meant to inform State Education Agencies about their responsibilities regarding federal privacy laws including FERPA and PPRA.



The Student Privacy Policy Office (SPPO) at the U.S. Department of Education (Department) performed a four-year review of a nationally...


Ransomware is a type of malicious software that encrypts files and data on a device, rendering the information unretrievable and unusable to the...


This recorded webinar provides best practices for schools and districts that are looking to build or enhance their cyber incident response...