This Is Going on Your Permanent Record: A Legal Analysis of Educational Data in the Cloud-Reference-Cited by-同舟云学术

This Is Going on Your Permanent Record: A Legal Analysis of Educational Data in the Cloud

Published:2024-08-09 Issue:3 Volume:1 Page:1-27
ISSN:2832-0565
Container-title:ACM Journal on Responsible Computing
language:en
Short-container-title:ACM J. Responsib. Comput.

Author:

Cohen Ben¹^ORCID,Hu Ashley¹^ORCID,Patino Deisy¹^ORCID,Coffman Joel²^ORCID

Affiliation:

1. Engineering for Professionals, Johns Hopkins University, Baltimore, United States

2. Engineering for Professionals, Johns Hopkins University, Baltimore, United States and Department of Computer and Cyber Sciences, United States Air Force Academy, USAF Academy, United States

Abstract

Moving operations to the cloud has become a way of life for many educational institutions. Much of the information these institutions store in the cloud is protected by the Family Educational Rights and Privacy Act (FERPA), which was last amended in 2002, well before cloud computing became ubiquitous. The application of a 1974 law to 21st-century technology presents a plethora of legal and technical questions. In this article, we present an interdisciplinary analysis of these issues. We examine both existing statutes and case law and contemporary research into cloud security, focusing on the impact of the latter on the former. We find that FERPA excludes information that students and faculty often believe is protected and that lower-court decisions have created further ambiguity. We additionally find that given current technology, the statute is no longer sufficient to protect student data, and we present recommendations for revisions.

Publisher

Association for Computing Machinery (ACM)

Link

https://dl.acm.org/doi/pdf/10.1145/3675230

Reference104 articles.

1. [n. d.]. Privacy act of 1974 public law no. 93-579. U.S. Statutes at Large 88 ([n. d.]). pp. 1896-1910 (codified as amended in U.S. Code Title 5 Section 552a).

2. 1974. Family Educational Rights and Privacy Act of 1974. U.S. Statutes at Large 88 (1974). pp. 828–834 (codified as amended in U.S. Code Title 20 Section 1232g).

3. 2022. FPF Drops Illuminate Education from Student Privacy Pledge. https://studentprivacypledge.org/news/fpf-drops-illuminate-education-from-student-privacy-pledge/

4. Ohio Revised Code §149.43(A)(1)(v). [n. d.]. ([n. d.]).

5. A Survey on Homomorphic Encryption Schemes