Data Security


The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99) is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.

Visit the U.S. Department of Education website and learn more about FERPA.

For easy access to guidance materials for parents, educators, and service providers on FERPA and privacy regulations. View guidance materials.

Protecting Student Privacy

The U.S. Department of Education is committed to student privacy. We administer the Family Educational Rights and Privacy Act (FERPA), and we provide technical assistance to help schools and school districts use best practices in their use and management of information about students. This site aims to assist stakeholders in protecting the privacy of students by providing official guidance on FERPA , technical best practices and the answers to Frequently Asked Questions. Responsibility for the Department’s student privacy operations lies in the Office of the Chief Privacy Officer.

Visit the Protecting Student Privacy site and review the resources available. Protecting Student Privacy site.


New York State Education Laws for Data Privacy and Security

Education Law 2-d  
April 2014 

The New York State Education Department released regulations that foster privacy security of personally identifiable information (PII) of students and certain PII related classroom teachers and principals.   PII cannot be sold or disclosed for marketing or commercial purposes and minimize the collection, processing, or transmission of PII.  

Part 121  
January 2020 

 Part 121 was adopted into Education Law 2-d.  The additional areas include the below.  

•Data Collection Transparency and Restriction 

•Bill of Rights 

•Complaints or Unauthorized Release 

•Data Security and Privacy Standards and Plan 

•Awareness Training 

•Designated Data Protection Officer 

•Third-Party Contracts 

•Reporting and Notifications 

•NIST Cybersecurity  

Data Security Team

Rich Yeoman

Wendy Villone

Mike Newman

Sue Marcano