Home / Ledgers
The 20 ledgers
Student privacy is organised the way a record travels: by stage of the backbone, from the student and the record through collection, use, consent and disclosure to vendor, security, right, breach and obligation. Each ledger is one cluster of guides, completed whole.
Ledger 01 Student privacy foundations What student privacy means in higher education: the student, the record, the use, and the obligation that follows the data. 18 guides Ledger 02 FERPA in full The Family Educational Rights and Privacy Act as it works for colleges: what it protects, who it binds, and where its exceptions run out. 22 guides Ledger 03 Education records and directory information What counts as an education record, what directory information is, and how the line between them is drawn and published. 16 guides Ledger 04 Consent and disclosure exceptions When consent is required, when an exception permits disclosure, and how to tell a lawful exception from a convenient one. 20 guides Ledger 05 PPRA, surveys and marketing The Protection of Pupil Rights Amendment where it touches colleges: surveys, sensitive questions, and marketing uses of student information. 11 guides Ledger 06 COPPA and younger students in EdTech Where the childrens privacy rule intersects with college EdTech: younger users, mixed audiences, and verifiable parental consent. 14 guides Ledger 07 Vendors and contracts The vendor chain: what a vendor collects, what the contract must forbid, and how an institution keeps control of student data it does not hold. 21 guides Ledger 08 Cloud systems and student portals Where student data lives now: cloud platforms, portals, single sign-on, and the controls that travel with the record. 17 guides Ledger 09 LMS platforms and learning data Learning management systems as record systems: clicks, submissions, grades, analytics, and the line between teaching and tracking. 15 guides Ledger 10 AI tools and student privacy Generative AI, proctoring, tutoring and advising tools: what they collect, what they learn from, and what an institution must settle before adoption. 19 guides Ledger 11 Biometrics and surveillance on campus Faces, fingerprints, cameras and location: the highest-sensitivity data on campus, and the governance it requires before any deployment. 13 guides Ledger 12 Student rights: access and correction The rights students hold over their own records: inspection, explanation, amendment requests, and what happens when a request is refused. 16 guides Ledger 13 Data retention and minimisation Keeping only what is needed, for only as long as it is needed: schedules, deletion, archives, and the records that must survive. 12 guides Ledger 14 Security controls for student data The controls that make a privacy promise real: access, authentication, encryption, logging, and the people who hold the keys. 18 guides Ledger 15 Breaches and incident response When student data is exposed: how to tell a breach from an incident, who is told, in what order, and what the record must show afterwards. 15 guides Ledger 16 Institutional privacy governance Who decides at an institution: the privacy officer, the committee, the policy, and the training that turns policy into habit. 20 guides Ledger 17 State student privacy laws Beyond federal law: state student privacy statutes, how they stack on FERPA, and why the strictest applicable rule usually governs. 14 guides Ledger 18 Research data and secondary use Records reused for research: consent, de-identification, review boards, and the uses a student never agreed to. 11 guides Ledger 19 Accessibility, equity and student privacy Privacy is not neutral: accessibility tools, disability records, and the students most exposed when data practices go wrong. 10 guides Ledger 20 Audits, documentation and readiness Proving the practice: inventories, assessments, audit trails, and the file an institution can show a regulator, a student, or itself. 17 guides