FERPA (20 U.S.C. § 1232g) governs the disclosure of student education records and applies to every district receiving federal funds. The Department's Privacy Technical Assistance Center has published targeted AI-adjacent resources (the AI Grading Compromise Facilitator Guide is on the studentprivacy.ed.gov resource list as of this refresh) alongside the longstanding Guidance for Reasonable Methods and Written Agreements that districts cite when contracting with third-party vendors under the school-official exception.
The implication for districts: existing FERPA contract obligations apply to AI vendors today, and PTAC has begun issuing AI-specific facilitator guides. The Department has not yet issued a comprehensive Dear Colleague letter or Notice of Proposed Rulemaking specifically addressing generative AI vendors under the school-official exception; districts should expect further PTAC publications and monitor studentprivacy.ed.gov.