Family Educational Rights Protection Act of 1974 <p>This policy outlines Proctorio's compliance to the Federal Educational Rights Protection Act of 1974 (FERPA).</p> What is FERPA?
<p>FERPA, the Family Educational Rights and Privacy Act of 1974 or the Buckley Amendment, is a federal law that affords students certain rights with respect to their education records.</p> What is an Education Record?
<p>An education record contains information directly related to a student and are maintained by an educational agency or institution or by a party acting for the agency or institution.
</p>
<p>Combinations of student names, courses, and video recordings are considered an education record.</p>
<p>Note:Proctorio acts as a third party and must maintain compliance with FERPA on behalf of the institution.</p> Why is FERPA important?
<p>FERPA protects students from having their information disseminated to third parties without the student's consent.
By utilizing a third party, an institution extends their liability to adhere to FERPA to the third party.
Beyond ethics and privacy, an institution's Title IV funding is tied to compliance with this act.</p> How does Proctorio comply with FERPA?
<p>We are FERPA certified by the Internet Keep Safe Coalition which signifies our compliance with relevant laws and regulations.
Please see our Personal Data Protections page for more information.</p>
<p>Proctorio never holds unencrypted education records.
All data that enters our system has been encrypted by the learning management system (LMS) and can only be unlocked by authorized users within the LMS.
Proctorio utilizes the LMS to gain information about the user's role.
This restricts information from being shared with users who do not fall under the "School Official" role.
The entire process is transparent to the end-user, but prevents Proctorio and unauthorized individuals from accessing to student data.</p>
<p>Note:Proctorio implements a zero-knowledge encryption scheme to keep your information safe.</p>
<p>Proctorio will never hold any personally identifiable information (PII) and institutions can feel confident in extending their FERPA liability to Proctorio.
</p>
<p>Proctorio delivers all content via SSL (TLS 1.2) and our servers are compliant to many standards including PCI and HIPAA.
</p>
<p>When going through technical support channels, our representatives will never ask for information beyond what FERPA defines as "Directory Information".
Our representatives may ask for the following information:</p>
<ul>
<li>Student name</li>
<li>Campus e-mail address</li>
<li>College or school</li>
</ul>
<p>Despite not collecting any personally identifiable information, all employees are subject to frequent and thorough FERPA training.
Any personal information requests beyond this should be reported to privacy@proctorio.com.</p> How is Proctorio different?
<p>Other technologies require the student to create accounts on their platform, enter credit card information on their platform, and will store unencrypted video on their platform.
This information is all categorized as personally identifiable information or as an education record and, therefore, falls under the jurisdiction of FERPA.
Any breach of this data could result in the loss of Title IV funding for institutions who have contracted the third party.</p>
<p>Note:Proctorio will never ask for nor store this information.</p>