What is COPPA & FERPA and Why Should You Care?

I have been working in the ed tech space - specifically music education - for more than 35 years. For the past 25 years, those ed tech tools have included online resources including websites that help students learn, explore, create and perform music. At first these websites didn’t require any type of login to use them (think about MusicTheory.net), but over the past 12 years, users have had to create accounts, and include some type of PII (personally identifying information). That information could be an email address, your name, your address, your age, and even your credit card information. When it comes to having students use these tools - whether they are free or paid - teachers and administrators face an increasing need to understand laws that protect student data and privacy. Among the most significant for U.S. educators are COPPA (Children's Online Privacy Protection Act) and FERPA (Family Educational Rights and Privacy Act). These regulations directly affect how educators can use technology in the classroom, where digital platforms ( like the MusicFirst Classroom) and apps (like Soundtrap and Flat) have become valuable resources. Understanding these laws is essential for protecting students, ensuring compliance, and making informed decisions when selecting technology. This post is an attempt to help music teachers understand the what and why of these very important laws.

What is COPPA?

The Children's Online Privacy Protection Act (COPPA) was enacted in 1998 to protect the privacy of children under 13 years of age online. It imposes strict guidelines on websites, apps, and online services that collect personal information from children. Companies are required to provide clear privacy policies and obtain verifiable parental consent before collecting any data from users under 13.

For teachers, this means that any tool or app used in the classroom must comply with COPPA if students are under 13. Music education, which increasingly relies on digital platforms such as PracticeFirst, Sight Reading Factory, MusicFirst Elementary, and others, falls under this umbrella. Educators need to verify that the tools they use either do not collect personal data from students or have obtained the necessary parental consent. A simple rule of thumb is that if the tool requires a student email address, and those students are under 13 years old, you simply can’t use it with your students UNLESS you get parental consent from every parent.

What is FERPA?

FERPA, or the Family Educational Rights and Privacy Act, was passed in 1974 and focuses on safeguarding students' educational records. This federal law grants parents the right to access and request amendments to their child's educational records while limiting who can view or share those records without parental consent. When students reach 18 or enter post-secondary education, these rights transfer to the student.

In music education, FERPA can be less immediately apparent than COPPA, but it is equally important. If a digital tool collects or stores student performance data (e.g., recordings, assessment scores), that data could be considered part of a student’s educational record. Any platform a teacher uses to track progress or grade performance—such as PracticeFirst or Soundtrap—needs to ensure compliance with FERPA, meaning that students' data must remain private and secure. At MusicFirst, COPPA and FERPA compliance are of paramount importance to us. I sign Digital Privacy Agreements with school districts every single day. We are required to clearly post our Privacy Policy on our platform, and if you like reading REALLY boring legal text, you will see exactly how we comply with both of these regulations, among MANY others.

While I won’t name the sites, there are MANY, MANY online tools in the music education space that require student email addresses. If you are using it with students over the age of 13, and those students have a school email address and a signed Internet Acceptable Use policy, you are OK to use those tools, but I would STRONGLY suggest getting permission from your school IT department and administration before you do. When it comes to compliance with student privacy, it is definitely better to ask permission first, rather than begging for forgiveness later.

What Does COPPA and FERPA Mean for Teachers?

For teachers, especially those using technology in music education, understanding these laws is crucial for multiple reasons: Many digital platforms provide incredible value for enhancing student learning. But before using these tools, educators must ensure that they meet COPPA and FERPA requirements. Teachers should check if the platform has a clear privacy policy and whether parental consent is needed, particularly if the students are under 13.

Music teachers may not have a background in technology or law, and the process of vetting tools for compliance can feel overwhelming. School districts can provide support by offering professional development sessions on understanding these laws. Some districts may already have pre-approved lists of COPPA- and FERPA-compliant tools, which can save teachers time and effort.

For teachers working with younger students, obtaining parental consent becomes a key responsibility when using online tools that collect any personal data. Many digital platforms have processes in place to help educators easily obtain consent, either through the platform itself or via school systems that handle permissions. This step is crucial for ensuring compliance with COPPA.

Music educators should also be mindful of how they store and share student data. Platforms that store recordings, performance assessments, or other personal information must protect that data under FERPA. This means teachers need to be careful about using tools that share data with third parties or may not have robust security measures in place. They should only use services with strong privacy protocols to safeguard student information.

While COPPA and FERPA may feel like legal jargon removed from the reality of classroom activities, compliance with these regulations is required. It’s easy to see the advantages of using digital tools - especially free ones, but failing to comply with privacy laws can result in serious consequences for schools, including fines and legal liabilities, not to mention the loss of trust from parents and the community. Students today are growing up in a highly connected digital world, and teaching them about data privacy is a valuable lesson that extends beyond music education. Teachers should be modeling the responsible use of technology by demonstrating how privacy should be respected and protected in the digital age.

Here is my advice on how to deal with these privacy laws:

• Check Privacy Policies: Before using a new app or platform, read its privacy policy carefully. Look for mentions of COPPA or FERPA compliance, and determine whether parental consent is required.

• Work with Your IT Department: School IT departments often have approved lists of compliant tools. Consult with them before introducing new technology into your classroom.

• Educate Students: Use the discussion of these laws as a teaching moment. Help students understand why their privacy matters and what they can do to protect it, especially in the context of the tools they use in school.

• Don’t Use Non-Compliant Tools with your Students: there are SO many great online music platforms and tools that DO comply with COPPA & FERPA. Use those instead.

As digital platforms play a increasingly important role in music education, understanding and complying with COPPA and FERPA is essential. These laws are not merely legal formalities but critical safeguards that protect students' privacy and ensure a safe learning environment. By being diligent about compliance, music teachers can integrate powerful educational technologies while respecting the rights of their students and building trust with families.

I’d like to thank my dear friend, Dr. Barbara Freedman, for prompting me to write this post! Barbara is a FORCE in music education and technology and I highly recommend checking out her site!