Azure FERPA compliance framework mapping.You can download the following documents for assistance with satisfying FERPA compliance requirements: Services for which Microsoft agrees to be designated as a 'school official' with 'legitimate educational interests' in customer data include: Microsoft in-scope cloud platforms & services Microsoft has published guidance documentation to assist Azure customers with satisfying their FERPA compliance requirements. When handling student education records, Microsoft agrees to abide by the limitations and requirements imposed by 34 CFR 99.33(a) just as school officials do. Customer data would include any student records provided through a school's use of Azure. In the Online Services Terms Data Protection Addendum (DPA), Microsoft agrees to be designated as a 'school official' with 'legitimate educational interests' in customer data as defined under FERPA. Microsoft and FERPAįERPA doesn't require or recognize audits or other certifications, so any academic institution that is subject to FERPA must assess for itself whether and how its use of a cloud service affects its ability to comply with FERPA requirements. Educational institutions that use cloud computing need contractual reassurances that a technology vendor manages sensitive student data appropriately. Security is central to compliance with FERPA, which requires the protection of student information from unauthorized disclosures. The law applies to schools, school districts, and any other institution that receives funding from the US Department of Education - that is, virtually all public K-12 schools and school districts, as well as most post-secondary institutions, both public and private. FERPA was enacted to ensure that parents and students age 18 and older can access those records, request changes to them, and control the disclosure of information, except in specific and limited cases where FERPA allows for disclosure without consent. The Family Educational Rights and Privacy Act (FERPA) is a US federal law that protects the privacy of students' education records, including personally identifiable and directory information.
0 Comments
Leave a Reply. |