• Protect student education records and personally identifiable information (PII)
• Establish procedures for secure handling of student data in online environments
• Define responsibilities of faculty, staff, students, and third-party vendors
• Provide transparency regarding data collection and usage practices
• Maintain accreditation standards

DEFINITIONS:

Education Records: Records directly related to a student maintained by the institution or a party acting on behalf of the institution, including academic transcripts, enrollment records, financial aid information, disciplinary records, and records of online course activity.

Personally Identifiable Information (PII): Information that can be used to identify an individual student, including but not limited to: name, student ID number, Social Security number, date of birth, email address, telephone number, IP address, biometric identifiers, and photographs.

Directory Information: Information contained in student education records that generally would not be considered harmful or an invasion of privacy if disclosed, including student name, email address, major field of study, dates of attendance, enrollment status, degrees and awards received, and participation in officially recognized activities.

Legitimate Educational Interest: A demonstrated need to access student information to fulfill one's professional responsibilities related to instruction, advising, administration, or student support services.

Third-Party Service Provider: External vendors, contractors, or organizations that provide educational technology tools, learning management systems, or services that require access to student information.

Authentication: The process of verifying the identity of a student participating in an online course or accessing digital educational resources.

Student Rights under FERPA:

• Students enrolled at Kentucky State University Online have the following rights regarding their education records:
• Right to Inspect and Review: Students have the right to inspect and review their education records within 45 days of submitting a written request to the Office of the Registrar. This includes records maintained in the learning management system and other online platforms.
• Right to Request Amendment: Students have the right to request amendment of education records they believe are inaccurate, misleading, or in violation of their privacy rights. Requests must be submitted in writing with supporting documentation.
• Right to Consent to Disclosure: Students have the right to consent to disclosure of personally identifiable information from their education records, except in cases where FERPA authorizes disclosure without consent
• Right to File a Complaint: Students have the right to file a complaint with the U.S. Department of Education concerning alleged failures by the institution to comply with FERPA requirements: