Re: FERPA and E-mailing grades

[Randall C Grimshaw <rgrimsha () SYR EDU>]

I would contribute that there are three issues: 1.) the basic insecurity of email transmission. (imagine grades with 
gmails targeted advertising engines) because most schools likely permit email forwarding even if it does begin in 
house. 2.) the basic insecurity of email archiving. (What if a student grows up to be president but didn't do so well 
on an economics course). 3.) The inability to repudiate email. (The student who's dog ate their email... or the 'I 
never got it' excuses). All of these seem to point to a secure, authenticated, repudiated web service.

Randall Grimshaw rgrimsha () syr edu<mailto:rgrimsha () syr edu>

________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Myers, Julie 
[julie.myers () ROCHESTER EDU]
Sent: Thursday, January 05, 2012 12:14 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] FERPA and E-mailing grades

This question is very timely for us as well and I would appreciate being copied on any reply.
Thank you,
Julie Myers
Chief Information Security Officer
University of  Rochester - University IT
julie.myers () rochester edu<mailto:julie.myers () rochester edu>
p: 585.273.1804  c: 585.208.0939
P Think twice before you print
 CONFIDENTIALITY: This email (including any attachments) may contain confidential, proprietary and privileged 
information, and unauthorized disclosure or use is prohibited. If you received this email in error, please notify the 
sender and delete this email from your system. Thank you.

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Robert 
Meyers
Sent: Thursday, January 05, 2012 11:31 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] FERPA and E-mailing grades

After a lot of time googling this topic, I'd appreciate comments from the group regarding faculty using e-mail to send 
grades to individual students. While it may be obvious that sending grades to a public account like gMail isn't a good 
idea, what about internal mail systems? Do you have specific policies or communications from the US Dept of Ed on this 
topic?

Thanks

Bob




Robert E. Meyers,  Ms.Ed.
Educational Program Manager
  Office of Information Security
West Virginia University
office: (304) 293-8502
remeyers () mail wvu edu