Information Privacy & Security (IPS)

The Information Privacy and Security courses address legal-regulatory requirements for data protection by subject area. The Information Security course discusses the protection of information in any context, regardless of the subject matter. FERPA-related content focuses on educational records. COPPA-related content focuses on personal information of children under the age of 13 collected online.

Note: For HIPAA-related requirements for health data, refer to the HIPAA series.

The Information Security course is organized to provide a basic foundation of data and device security techniques, supplemented by more detailed information relevant to the particular activities and context of the learner.

The FERPA course includes content on the basics of federal FERPA requirements, which also touches on state and local requirements. An introductory module is complemented by audience-specific modules.

The COPPA course includes content on the basics of federal COPPA requirements, such as the key requirements for operators of online services, the types of personal information protected under the law, the legal requirements for obtaining verifiable parental consent, the enforcement of COPPA, and COPPA’s impact on edtech and research involving minors in school settings.

The Information Security track is organized to provide a basic foundation of data and device security techniques, supplemented by more detailed information relevant to the particular activities and context of the learner. Learn more.

For an Information Security course, we recommend that the two “Basics” modules be required as a foundation. A subset of the remaining modules could be used as electives, or as purely supplemental (optional) modules.

For a FERPA course, we recommend that the “FERPA: An Introduction” module be required as a foundation, along with at least one of the role-specific modules, depending on the type of learner.

For a COPPA course, we recommend that all modules be required and presented in sequence.

There is not specific guidance on the frequency of information security, FERPA, or COPPA training. It is up to each organization to determine when a “refresher” is appropriate. Sometimes state laws or organizational policies may provide a standard. Absent other considerations, we recommend retraining of some kind at least every three to four years.

Effective April 1, 2023, the Health Privacy (HIPAA) modules that were included in the Information Privacy and Security (IPS) series are no longer part of the IPS series.

A new HIPAA series includes the Health Privacy (HIPAA) modules as well as a new HIPAA Basics for Healthcare Professionals course. Organizations that have Health Privacy (HIPAA) modules in their gradebooks will have the new HIPAA series added to their renewal invoices (for an additional fee).