In her blog “Law, Policy and IT” Tracy Mitrano expressed a concern: protecting student privacy as colleges and universities outsource information processing with external servicers. To ensure education records are protected, she writes, outsourcing contracts must explicitly detail the protection to be provided student data. She suggested contract provisions should require an entity comply with […]
Tracy Mitrano
A “Bold Idea” Essential for Student Privacy
In Tracy Mitrano’s October 31, 2001 blog “FERPA, GLBA and HIPAA In Vendor Contract,” there was “a bold proposal.” She posited that most important action that can be taken to protect student privacy is a contractual requirement that contractors follow the same privacy requirements—including FERPA (Federal Education Rights and Privacy Act)—as colleges and universities themselves […]