I am leading the development of a student information system product. There is a disagreement with my product team and a different department on our access control is FERPA compliance. As such I and building a document and making my case to legal. Does anyone know of any resources that give examples of what is and what is not FERPA compliant, specifically related to EdTech? Specifically for software that only school administrators will be using? The verbiage in the law is vague, and the only examples I see are so far removed from the particular nuance of what we are debating.
