Certified Information Privacy Professional – United States (CIPP/US) — Question 98

Which act violates the Family Educational Rights and Privacy Act of 1974 (FERPA)?

Answer options

• A. A K-12 assessment vendor obtains a student’s signed essay about her hometown from her school to use as an exemplar for public release
• B. A university posts a public student directory that includes names, hometowns, e-mail addresses, and majors
• C. A newspaper prints the names, grade levels, and hometowns of students who made the quarterly honor roll
• D. University police provide an arrest report to a student’s hometown police, who suspect him of a similar crime

Correct answer: A

Explanation

Option A is correct because obtaining a student's signed essay without consent for public use violates FERPA's privacy protections. The other options (B, C, D) are compliant with FERPA as they either involve publicly available information or lawful sharing of information under specific circumstances.