What are the consequences of a third partys misuse of education records?
A. School officials must inform third parties receiving information, as allowed under FERPA, of the requirements concerning redisclosure of information. If a third party is found to have improperly redisclosed personally identifiable information from education records, the school may not allow that third party access to information for at least 5 years.