Category Archives: 2012

OSEP Policy Letter to Edmunds on procedural safeguards

Dept. of Education logo

This 2012 letter from OSEP determines that the term “early intervention records” is the same as “education records” for the purposes of the confidentiality protections under Part C of the IDEA and FERPA and exempt as “Protective Health Information” under the HIPAA Privacy Rule. Published by the Office of Special Education Programs (OSEP) OSEP Policy […]

Identity Authentication Best Practices

This 2012 brief offers best practice recommendations for developing and implementing effective authentication processes to help ensure that only appropriate individuals and entities have access to education records. General suggestions provided in the brief are applicable to all modes of data access, be it in person, over the phone, by mail, or electronically. Published by […]

Cloud Computing

PTAC logo: padlock

This 2015 update of a 2012 document is designed to assist educational agencies and institutions that are considering using cloud computing solutions for education data. It contains responses to frequently asked questions about meeting necessary data privacy and data security requirements, including compliance with the Family Educational Rights and Privacy Act, to ensure proper protection […]