DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

The Case for Making EdTech Companies Liable Under FERPA

Posted on November 11, 2025November 11, 2025 by Dissent

Lavanya Sathyamurthy writes:

Schools now depend on an average of 2,591 edtech tools in a single school year, according to one estimate. These tools can track private conversations between teachers and families and store comprehensive academic and personal records. Yet many companies do not clearly disclose how they collect and use student information. According to one nonprofit, 96% of apps used in schools share student data, such as email addresses and birth dates, with third parties, such as advertising entities. This often occurs without parental or student consent and, therefore, is likely in violation of the Family Educational Rights and Privacy Act (FERPA).

FERPA is a federal law that requires educational institutions that receive federal funding, as well as third parties with whom they share student data, to protect the privacy of student educational records. Institutions must obtain consent from either the parent or student, if the student is 18 or older, prior to releasing these records and maintain reasonable measures to keep education records secure, such as by utilizing password-protected portals and overseeing third parties’ use of data.

The Department of Education is solely responsible for enforcing various federal education regulations, including FERPA. Given the Department of Education’s impending closure and the increasing use of student data by educational technology vendors, Congress should amend FERPA to hold these vendors, rather than the schools, directly responsible for vendor compliance.

Read more at TechPolicy.Press

Category: Education SectorLegislationU.S.

Post navigation

← NHS providers reviewing stolen Synnovis data published by cyber criminals
Army gynecologist took secret videos of patients during intimate exams, lawsuit says →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Defense Bill Would Require New Cyber Requirements for Some DoD Telecom Contracts
  • Tell the truth, or someone will tell it for you — Trumbull County, Ohio edition (1)
  • US Posts $10 Million Bounty for Iranian Hackers
  • South Korea police raid e-commerce giant Coupang over data leak; govt schedules hearing
  • FinCEN Report: Reported Ransomware Incidents and Payments Reached All-Time High in 2023
  • Leavenworth, Kansas cyberattack disrupts city services
  • They’ve escaped a lot of media attention, but Anubis RaaS is a threat to the medical sector (1)
  • “In the most expedient time possible…”
  • Portugal updates cybercrime law to exempt security researchers
  • LockBit 5’s “new secure blog domain” infra leaked already

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • FTC Denies Petition from SpyFone App CEO to Vacate 2021 Order
  • Privacy concerns raised as Grok AI found to be a stalker’s best friend
  • PRIVACY—S.D. Cal.: Employee did not waive privacy right in personal email data on company provided laptop, (Dec 5, 2025)
  • EU justice chief draws red line on privacy reforms
  • Kaiser Permanente to Pay Up to $47.5M in Web Tracker Lawsuit

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: Dissent.73
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.