Family Educational Rights and Privacy Act (FERPA)
FERPA: Annual Notification, Right to Inspect and Review (Subpart B)

Family Educational Rights and Privacy Act (FERPA) FERPA-Part99.10_11_12: Right to Inspect and Review (34 CFR 99.10, 99.11, 99.12)

34 CFR 99.10 right to inspect + review; 99.11 fees; 99.12 limitations. RIGHT: parents + eligible students must be permitted to inspect + review the student's education records within 45 days of receipt of a request (or sooner if individual state law shortens the period). The institution must respond to reasonable requests for explanations + interpretations of records + provide copies if circumstances effectively prevent inspection at the institution. FEES: institutions may charge a reasonable fee for copies UNLESS the fee would effectively prevent the exercise of the right of inspection (e.g. low-income family). LIMITATIONS: 99.12 carves out certain records from inspection (e.g. financial records of parents; confidential letters of recommendation submitted before 1 January 1975 + post-1975 if the student has waived the right of inspection of those letters in writing; records of college students containing information about other students which must be redacted or excerpted to comply); the inspection right does not extend to records of other students. PROCEDURE: institutions must publish + follow a documented procedure for receiving + responding to inspection requests including identity verification + reasonable time + location.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 23 controls across 17 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • 502 Interoperability with Assistive Technology
  • 707 Real-Time Text Functionality
  • CH-FADP-09 Notification of data files to the FDPIC
  • FADP-13 Right to Data Portability (Article 28)

APPI · 1 control

  • APPI-A27 Restriction on Provision to Third Parties
  • DS-2 Ensure software supply chain security

Bahrain PDPL · 1 control

  • BB-DPA-14 Section 15 - Right to Data Portability
  • DIQ-1 Data Integration and Interoperability
  • LOPDP-EC-Data-Subject-Rights-Access-Rectification-Erasure-Object-Portability-Automated-Decisions-Articles-16-27 Ecuador LOPDP Data Subject Rights + Access + Rectification + Erasure + Articles 16-27
  • UAE-PDPL-Art.8 Records of processing activities (UAE PDPL Article 8)
  • RBI-AA-Ecosystem-FIPs-FIUs-Interoperability-Onboarding-Sahamati-DPI-IndiaStack RBI AA Ecosystem - Financial Information Providers (FIPs) + Financial Information Users (FIUs) + Interoperability + Sahamati SRO Onboarding + DPI India Stack + Cross-Sector Regulators

India DPDP Act · 1 control

  • DOM172-Data-Subject-ARCO-Rights-Habeas-Data-Action-Constitutional-Article-70-Access-Rectification-Cancellation-Opposition Dominican Republic Law 172-13 ARCO Rights + Habeas Data Action + Constitutional Article 70
  • AUPRV-5 APP 12-13 Access and Correction of Personal Information
  • RIDTPPA-2 Consumer Rights (Access, Correction, Deletion, Portability, Opt-Out)
  • CPSC-STD.4 Interoperability Safety
  • VERMONTAICDA-1 AI System Inventory and Risk Assessment

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in FERPA: Annual Notification, Right to Inspect and Review (Subpart B)

Query this from an agent

The graph holds this control, the 23 it maps to, and the evidence behind each claim, over MCP and REST.