From Missouri Education Watchdog …..
LAW allows you to see who has requested your child’s data.
Luckily for parents, there is an existing code requiring education providers to keep very detailed records of data requests and disclosures and they must provide that information to parents.
Use this template letter , send to each education provider to see who has been given access to your child’s pii. This is QUICK and EASY and what you find out will likely be very interesting.
Speaking of data transparency, USDOE is all about the data
Yes, FERPA permits a state educational authority, such as a state board of higher education that has the legal authority to enter into agreements for, or on behalf of, constituent institutions, to re-disclose PII from education records to an organization under the studies exception to conduct a study to improve instruction. It is the responsibility of the state educational authority to ensure that the written agreement specifies the purpose, scope, and duration of the study, as well as the PII to be disclosed. The state educational authority also must ensure the organization uses PII from education records only to meet the purpose of the study; conducts the study in a manner that does not permit identification of parents and students by anyone other than representatives of the organization with legitimate interests; and destroys all PII when it is no longer needed for the purpose for which the study was conducted.