Our Commitment to Student Privacy

Expert IEP operates as an educational service provider committed to protecting student educational records under the Family Educational Rights and Privacy Act (FERPA) and applying healthcare-level security measures to all family data.
Educational Purpose and FERPA Compliance

Our Educational Mission: We provide IEP analysis and advocacy support services to help families navigate special education processes and improve educational outcomes for students with disabilities.

• Obtaining proper consent before accessing educational records

• Limiting data use to legitimate educational purposes

• Providing parents/eligible students with access and correction rights

• Maintaining security safeguards for educational records

• Not re-disclosing educational records without authorization

• Inspect and review educational records we maintain

• Request corrections to inaccurate information

• Control disclosure of personally identifiable information

• File complaints with the Department of Education regarding FERPA violations
  
  

• Student first name only

• Educational diagnosis relevant to IEP services

• Current IEP goals and objectives

• Accommodations and modifications

• Related services information

• Last names and addresses

• Detailed medical histories

• Behavioral incident reports

• Family background information

• School disciplinary records

• Parent/guardian contact information

• Payment information (processed by third-party payment processors)

• Communication preferences

• Service history
  
  

• Bank-level encryption for all data transmission and storage

• Role-based access controls limiting staff access to necessary information

• Regular security audits and penetration testing

• Secure servers located in the United States

• Automatic data deletion protocols

• Staff training on FERPA requirements and data protection

• Signed confidentiality agreements for all personnel

• Incident response procedures for potential breaches

• Regular privacy impact assessments
  
  

• Providing personalized IEP analysis and recommendations

• Improving our educational services and methodologies

• Communicating with families about their specific services

• Complying with legal obligations

• Marketing or promotional purposes

• Sharing with third-party organizations

• Creating student profiles for non-educational purposes

• Any use not directly related to educational services
  
  

• Partnerships with academic institutions (such as UC Davis MIND Institute)

• Research on effective IEP practices and interventions

• Development of improved educational tools and resources

• All research conducted under IRB-approved protocols

• Data is genuinely anonymized, not merely de-identified

• No individual students or families can be re-identified

• Parents may opt out of any research participation

• Research findings focus on educational practices, not individual students

• Marketing companies

• Other nonprofits or educational organizations

• Government agencies (except as required by law)

• Research partners (only anonymized data shared)
  
  

• Request copies of all educational records we maintain

• Review how their information has been used

• Obtain information about third parties who have received their data (if any)

• Inaccurate contact information

• Incorrect educational information

• Errors in service records

• Delete your account and associated data

• Remove your family from all communications

• Destroy educational records we maintain (subject to legal retention requirements)

• Future communications from us

• Participation in anonymized research

• Certain data collection practices
  
  

• Active accounts: During service period plus 3 years

• Inactive accounts: Automatically deleted after 2 years of inactivity

• Research data: Only anonymized data retained for research purposes

• Removed from all active systems

• Purged from backup systems within 90 days

• Destroyed using industry-standard data destruction methods

• Collect information only with explicit parental consent

• Apply enhanced protections to all student information regardless of age

• Allow parents full control over their child's educational information

• Provide clear notice of information collection and use
  
  

• Right to know what personal information we collect and how it's used

• Right to delete personal information (subject to legal exceptions)

• Right to opt-out of sale of personal information (note: we do not sell personal information)

• Right to non-discrimination for exercising privacy rights

• Email notification to active account holders

• Prominent notice on our website

• Direct communication for changes affecting educational record handling

• Family Educational Rights and Privacy Act (FERPA)

• California Consumer Privacy Act (CCPA)

• Children's Online Privacy Protection Act (COPPA)

• Other applicable federal and state privacy laws