How to authenticate anyone requesting student records

The Family Educational Rights and Privacy Act generally prohibits the disclosure of personally identifiable information in a student education record to a third party without consent. Importantly, authenticating the identity of a party receiving or transmitting student records is a key practice for FERPA compliance. In this context, authentication means ensuring the recipient or sender of education records is the authorized or intended recipient or sender.