FERPA implementation status as of 2026. STATUTORY + REGULATORY BASE: 20 USC 1232g (Family Educational Rights and Privacy Act of 1974 - the Buckley Amendment) implemented by 34 CFR Part 99 with FINAL RULE revisions in 1988 + 1995 + 2008 + 2011 (major revisions on directory information + studies/audit/evaluation exceptions + redisclosure) + 2020 SPPO study + ongoing administrative guidance. CURRENT GUIDANCE: SPPO Technical Assistance Letters + PTAC Best Practices Guidance + Joint Statements on COPPA + HIPAA. 2024-2025 PRIORITIES + TRENDS: (a) AI + machine learning systems processing student PII - PTAC guidance evolving on AI vendor agreements + algorithmic transparency + child-safety; (b) Cloud + edtech vendor evaluation - documented criteria + due diligence + contract clauses; (c) Data breach notification - while FERPA itself has no breach notification deadline, all 50 states + DC have data breach notification laws applicable to student PII + institutions must coordinate; (d) State law coordination - the FERPA + State Student Privacy Laws Comparison Tool maintained by PTAC + the 2024 GAO Report on Student Data Privacy; (e) FERPA + Title IX coordination on sexual-misconduct records following 2022 + 2024 Title IX Final Rules; (f) Cybersecurity threats + ransomware attacks on K-12 + higher ed - CISA + SPPO joint advisories; (g) Generative AI + LLM use in education - emerging guidance on student-data-as-training-data prohibitions + opt-in models. NO substantive FERPA legislative amendment is pending in Congress as of early 2026; legislative + regulatory action focuses on state-level student privacy laws + the proposed federal Children Online Privacy Protection Act 2.0 (COPPA 2.0).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.