FERPA Compliance Notice

Last Updated: August 4, 2025

Overview

This notice explains how Speddy supports individual education providers in maintaining compliance with the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, when working with student educational records.

As an individual provider using Speddy, you play a crucial role in protecting student privacy while delivering essential educational services.

What is FERPA?

FERPA is a federal law that protects the privacy of student education records. It gives parents certain rights regarding their children's education records, which transfer to students when they reach age 18 or attend a postsecondary institution.

FERPA applies to all educational agencies and institutions that receive funding under any program administered by the U.S. Department of Education, including the school districts where you provide services.

Your Role as a Provider Under FERPA

When using Speddy in your professional capacity, you operate as:

  • A "School Official" with legitimate educational interests in student records
  • An authorized representative of the school district with access to specific student data
  • A professional bound by FERPA's use and re-disclosure requirements
  • A steward of student privacy responsible for protecting educational records

Your FERPA Responsibilities

1. Authorized Access Only

  • Access only student records for students you are authorized to serve
  • Ensure your school district has designated you as having legitimate educational interest
  • Do not access records out of curiosity or for non-educational purposes
  • Verify your authorization before entering any student data

2. Maintain Confidentiality

  • Protect student information from unauthorized disclosure
  • Do not share login credentials or allow unauthorized access to your account
  • Keep screens secure when viewing student data
  • Follow your professional code of ethics regarding confidentiality

3. Appropriate Use of Data

  • Use student data only for authorized educational purposes
  • Document services and progress accurately and professionally
  • Share information only with other authorized school officials when necessary
  • Do not use student data for personal, commercial, or non-educational purposes

4. Re-disclosure Restrictions

  • Do not re-disclose student information without proper authorization
  • Obtain written consent before sharing information outside the school context
  • Understand exceptions that allow disclosure (health/safety emergencies, etc.)
  • Consult with school administrators when unsure about disclosure requirements

How Speddy Supports Your FERPA Compliance

Technical Safeguards

  • Role-based access controls ensure you see only authorized student data
  • Secure authentication protects against unauthorized access
  • Encrypted data transmission and storage
  • Audit logs track all data access and modifications
  • Automatic session timeouts for security

Administrative Safeguards

  • Verification of school district email addresses during registration
  • Data minimization - only essential information is collected
  • Clear data retention and deletion policies
  • Regular security assessments and updates
  • Staff training on FERPA requirements

Operational Safeguards

  • Data is compartmentalized by school district and provider authorization
  • No marketing or commercial use of student data
  • Transparent privacy practices and policies
  • Incident response procedures for any potential breaches

Data Handling Best Practices

As a provider using Speddy, follow these best practices:

Before Using Student Data

  • Confirm you are authorized to serve the student
  • Verify the student is on your caseload or service roster
  • Ensure you have received proper FERPA training from your district
  • Review your district's specific FERPA policies and procedures

While Entering Data

  • Use professional, objective language in all documentation
  • Enter only information necessary for service delivery
  • Double-check accuracy of all data entered
  • Use privacy-protective identifiers when possible (initials, student IDs)

When Sharing Information

  • Share only with other authorized school officials who need the information
  • Use secure methods of communication within the school system
  • Obtain proper consent before sharing with external parties
  • Document any disclosures as required by your district

Data Retention and Deletion

  • Student data is retained only while you are actively providing services
  • Data retention follows your school district's established policies
  • When you no longer serve a student, access to their data is removed
  • Upon account termination, all associated student data is handled according to district requirements
  • You may request data deletion in accordance with FERPA and district policies

Incident Response and Reporting

If you suspect any privacy incident or unauthorized access:

  1. Immediately change your password and secure your account
  2. Report the incident to your school district administration
  3. Contact Speddy support to investigate and document the incident
  4. Follow your district's incident response procedures
  5. Cooperate fully with any investigation or remediation efforts

Remember: Prompt reporting protects both students and yourself from potential harm.

Your Professional Obligations

Beyond FERPA, you must also comply with:

  • Your professional licensing requirements and codes of ethics
  • Your school district's policies and procedures
  • State and federal special education laws
  • Professional standards for documentation and record-keeping
  • Confidentiality requirements specific to your role

School District Coordination

To ensure FERPA compliance, school districts should:

  • Include individual providers in their annual FERPA notification to parents
  • Designate authorized providers as "school officials" with legitimate educational interests
  • Provide FERPA training to all providers who access student data
  • Establish clear policies for provider access to student records
  • Monitor and audit provider compliance with privacy requirements
  • Maintain documentation of provider authorization and training

Directory Information

Speddy does not collect or maintain directory information. All student data entered by providers is treated as confidential educational records requiring appropriate protection under FERPA.

Parent and Student Rights

You should be aware that parents and eligible students have rights under FERPA to:

  • Inspect and review the student's education records
  • Request amendment of records they believe are inaccurate
  • Provide written consent before disclosure of personally identifiable information
  • File complaints with the U.S. Department of Education regarding FERPA violations

Refer any parent or student requests regarding these rights to your school district administration.

Training and Ongoing Compliance

To maintain FERPA compliance:

  • Complete annual FERPA training provided by your school district
  • Stay updated on changes to FERPA regulations and district policies
  • Participate in professional development on student privacy
  • Review and acknowledge Speddy's privacy policies annually
  • Report any concerns or questions about FERPA compliance promptly

Questions and Support

For questions about FERPA compliance or student privacy:

  • District-specific questions: Contact your school district's FERPA officer or administration
  • Speddy technical questions: Contact our support team
  • General FERPA questions: Consult the U.S. Department of Education's FERPA resources
  • Professional questions: Consult your professional supervisor or licensing board

Additional Resources

For more information about FERPA:

  • U.S. Department of Education FERPA website: studentprivacy.ed.gov
  • Your school district's FERPA policies and procedures
  • Professional association guidance on student privacy
  • State education department privacy resources

Contact Information

For FERPA-related questions about Speddy:

B. Stewart
Privacy Officer
bstew510@gmail.com