Regulatory Updates

Educational institutions should begin preparing their annual FERPA notification materials for the upcoming 2026-27 academic year. Under FERPA, schools must annually notify parents and eligible students of their rights regarding education records, including the right to inspect records, request amendments, and control disclosure of personally identifiable information. Institutions should review and update their notification language, directory information policies, and opt-out procedures before the start of the fall semester.

The Federal Trade Commission has signaled it will increase enforcement of COPPA violations by EdTech companies, particularly those collecting data from children under 13 without verifiable parental consent. With the modernized COPPA rule now in effect, EdTech platforms must ensure compliance with updated data minimization requirements, consent mechanisms, and data retention limits. Companies operating in the K-12 space should review their practices against the updated rule requirements.