What penalties apply to the misuse or improper disclosure of confidential information?
A. The penalty for noncompliance with the Family Educational Rights and Privacy Act (FERPA) and Protection of Pupil Rights Amendment (PPRA) can be withdrawal of U.S. Department of Education funds from the institution or agency that has violated the law. This applies to schools, school districts, and state education agencies. The Family Policy Compliance Office of the U.S. Department of Education, charged with reviewing and investigating complaints, seeks to promote voluntary compliance with the law. A third party who improperly discloses personally identifiable information from student records can be prohibited from receiving access to records at the education agency or institution for at least 5 years. State laws on privacy may also apply penalties.
