How to Audit Education-Record Access, Corrections, and Disclosures

Freeze the eligible record cohort

For Marisol, enumerate requests and actions due during the school year before calculating results. Preserve transferred, withdrawn, denied, excluded, superseded, held, and added items with dated reasons. Define whether the unit is a request, record category, produced file, explanation, amendment issue, disclosure entry, directory category, or destruction action.

Trace each item through its final state

Link request receipt to custodian, governing source, due event, production, accessible delivery, explanation, correction, decision, statement, disclosure basis, retention status, or destruction evidence. A sent link measures transmission. An opened file measures access. Neither establishes completeness, accuracy, lawful disclosure, or a finished downstream action.

Use compatible denominators

Report record categories produced divided by categories due, accessible files delivered divided by files due, amendment decisions issued divided by decisions due, disclosure entries resolved divided by entries reviewed, and destruction actions verified divided by actions approved. Publish counts, report how long open items have remained unresolved, and segment by holder, category, route, and failure reason.

Retest representative corrections

Give each finding an owner, due date, immediate safeguard, correction, affected cohort, and acceptance condition. Retest a portal export, screen-reader document, corrected field, attached family statement, disclosure-log entry, directory-information setting, health-record route, or destruction certificate. Close only when evidence meets the predefined condition.

Prepare Marisol's record review

Bring Marisol's education-record rights audit, the school's annual FERPA notice and records procedure, current IDEA records when applicable, representative files and messages, authority or eligible-student information, access and communication needs, open deadlines, and a short decision list. Also bring delivery evidence, school responses, correction history, disclosure questions, retention notices, and requested outcomes. End with owners, dates, and a representative verification test.

Build Marisol's source-attributed register

Create a restricted education-record rights audit for Marisol's locked cohort, request, record category, holder, access, explanation, copy, amendment, hearing, statement, disclosure, directory choice, health route, retention, destruction, and validation. Give every field a source, record or notice version, holder, requester, recipient, authority, date, status, owner, next action, due date, correction, and closure evidence. Attribute the student's direct communication, family report, school record, school explanation, clinical record, professional opinion, and legal conclusion separately.

Protect Marisol's access and participation

Give Marisol and family participants understandable, accessible information, privacy, sufficient review time, and a reliable way to ask questions, disagree, correct, accept, decline, pause, and request help. Keep AAC, interpreters, captions, screen readers, hearing and vision tools, mobility supports, food, water, bathroom access, prescribed care, rest, and emergency help available.

Ask eight record-rights questions for Marisol

Use these questions in the education-record rights audit:

• Which record, category, holder, school or agency, requester, date range, and purpose apply?
• Which FERPA, IDEA, HIPAA, state, district, court, contract, or other source governs the field?
• Who holds the right now, and what authority or eligible-student status supports the request or decision?
• Which inspection, explanation, copy, accessibility, amendment, hearing, disclosure, retention, or destruction step is due?
• Which exact clock starts and ends the step, and which event can require earlier action?
• What did Marisol communicate directly, and what did family, school, or a professional report separately?
• Which source record, response, delivery, correction, access, or validation evidence exists?
• Which representative item will show that the repaired record process works?

Classify fields as complete, failed, pending, declined, disputed, excluded, superseded, held, or inapplicable with a reason.

A fictional education-record example for Marisol

Marisol is fictional and involved in a school-year cohort of access requests, productions, explanations, amendments, disclosure logs, directory choices, health-record routes, and destruction actions. Reviewers freeze 121 locked access, correction, disclosure, choice, retention, and validation records and complete 89 of 121, or 73.6%, by the checkpoint. A missing record identity, holder, authority, source, date, access, explanation, copy, correction, disclosure, retention, or validation field remains in Marisol's denominator with an owner, age, and next action.

The education-record rights audit measures evidence completion. It leaves legal compliance, educational quality, clinical quality, record accuracy, disclosure lawfulness, student understanding, family experience, and outcome as separate questions. Concurrent changes limit causal conclusions.

Use compatible record denominators for Marisol

For Marisol's education-record rights audit, report eligible records produced divided by records due; accessible records received divided by accessible records due; explanations answered divided by explanations due; amendment decisions issued divided by decisions due; disclosure entries resolved divided by entries reviewed; and corrections or destruction actions passing validation divided by actions due.

Publish raw counts with percentages and report how long every open item has remained unresolved. Keep request receipt, search, production, access, explanation, copy, amendment, hearing, statement, disclosure, directory choice, retention, destruction, and validation as distinct measures.

Apply the federal record-rights boundaries for Marisol

For Marisol, current 34 CFR Part 99 defines FERPA education records and covers access, amendment, consent and exceptions, disclosure records, directory information, and complaints. The Education Department's FERPA hub supplies current public guidance. IDEA Part B separately addresses access, records of access, fees, amendment, hearing opportunity, hearing results, and destruction within their stated scope.

These federal rules do not create one file architecture, one state retention schedule, or one universal response for every record dispute. Verify current state, district, court, complaint, safety, cybersecurity, records, and student-specific requirements.

Apply health, communication, and professional boundaries for Marisol

Federal school health-record guidance and joint FERPA-HIPAA guidance explain why holder and entity status matter for Marisol. ASHA addresses AAC access. The BACB Ethics Code applies to covered people, and the CASP overview gives broad organizational context only.

These sources do not assign school-record, medical, clinical, privacy, cybersecurity, hearing, complaint, or legal authority to a private ABA provider or software platform.

Close Marisol's loop with a record test

Ask Marisol and the relevant family participant to review the outcome through their usual language and communication methods. Test the repaired file, portal export, explanation, copy, accessible format, corrected field, attached statement, disclosure entry, directory choice, health-record route, retention action, or destruction evidence suited to the issue. Log every mismatch, immediate safeguard, owner, due date, affected record or decision, and later verification. For Marisol, audit education record access corrections and disclosures by comparing the final response with the governing source, affected records, student access, and acceptance condition. Preserve unresolved differences with an owner and next step.