FERPA: Annual Notification, Right to Inspect and Review (Subpart B)
Family Educational Rights and Privacy Act (FERPA) FERPA-Part99.7: Annual Notification of Rights (34 CFR 99.7)
34 CFR 99.7 + PTAC training guidance. ANNUAL NOTIFICATION REQUIREMENT: educational agencies + institutions must annually notify parents + eligible students of their FERPA rights including (a) the right to inspect and review education records; (b) the right to request amendment; (c) the right to consent to disclosures with the exceptions; (d) the right to file a complaint with the SPPO. CONTENT: the notice must include the procedure for inspecting + reviewing records + the procedure for requesting amendment + the criteria for designating school officials with legitimate educational interest + the FERPA office contact information + the SPPO contact information. METHOD: any means reasonably likely to inform (e.g. student handbook + website + email + paper notice + parent-teacher conference). DIRECTORY INFORMATION: the annual notice must also specify the types of information designated as directory information + the right to refuse such designation + the deadline + procedure for refusing. TRAINING: educational institutions should also provide workforce training on FERPA + the institutional procedures for handling PII + the school official confidentiality requirements (per PTAC training guidance).
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
What else in your programme already covers this
This control maps to 84 controls across 31 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
ItalyCodice-Garante-Enforcement-AdministrativeSanctions-Criminal-Art166-167-170-20MEUR-Coord-EDPB Italy Codice Garante Authority + Article 140-bis + Article 144 Complaints + Article 166 Administrative Sanctions up to EUR 20M/4% + Article 167 Criminal Offences + Article 170 Failure to Comply with Garante Orders + EDPB Coordination
ItalyCodice-ePrivacy-Cookies-ElectronicCommunications-Telemarketing-PublicOpposition-TrafficDataRetention-Art121-122-130-132 Italy Codice ePrivacy - Article 121 Electronic Communications + Article 122 Cookies and Tracking + Article 130 Unsolicited Direct Marketing + Article 132 Traffic Data Retention + Italian Public Opposition Register (Registro delle Opposizioni)