Under the Family Educational Rights and Privacy Act (FERPA) and for the purposes of the Administration of Records frameworks, "educational agency or institution" means any public or private agency or institution.

The educational agency or institution must ensure the confidentiality of any personally identifiable data, information, and records collected or maintained by the educational agency or institution, including but not limited to:

• The student's name;   

• The name of the student's parent or other family member;

• The address of the student or student's family;

• A personal identifier, such as the student's social security number or student number;

• A list of personal characteristics that would make the student's identity easily traceable; or

• Other information that would make the student's identity easily traceable.