C01 - Demystifying the Enigma of FERPA Requirements, Exceptions, and Entanglements Through Varied Perspectives

This session will explore the use of FERPA-protected data in human participant research, highlighting diverse institutional approaches and the varying roles IRBs play in ensuring FERPA compliance. Unlike HIPAA, FERPA does not permit a privacy board to waive consent requirements, though it includes multiple exceptions—many of which are interpreted differently across institutions.
Speakers will clarify what qualifies as FERPA-protected data and discuss how FERPA regulations affect access to data for research. The session will examine how institutions interpret and apply FERPA differently, particularly when handling data from internal versus external sources. Presenters will also share how IRBs and HRPPs contribute to shaping institutional policies around FERPA, offering practical insights into navigating these complex requirements.