Data Security - Strawbridge Studios

What is FERPA?

The Family Educational Rights and Privacy Act (FERPA) is a federal law that affords parents the right to have access to their children’s education records, the right to seek to have the records amended, and the right to have some control over the disclosure of personally identifiable information from the education records. When a student turns 18 years old, or enters a postsecondary institution at any age, the rights under FERPA transfer from the parents to the student (“eligible student”). The FERPA statute is found at 20 U.S.C. § 1232g and the FERPA regulations are found at 34 CFR Part 99.

Strawbridge Studios' Commitment to FERPA

At Strawbridge Studios, we are dedicated to protecting the privacy and security of our district partners and the students they serve. We fully comply with the Family Educational Rights and Privacy Act (FERPA) and adhere to all regulations to ensure the confidentiality, integrity, and proper handling of this sensitive educational data. Our policies are designed to support our partners in maintaining compliance and safeguarding student information at all times.

SOC Type II: Ensuring Your Data is Protected

Strawbridge Studios is committed to keeping your student, parent, and school data private and secure through every step of the photography process. We are currently in the second phase of an SOC 2 Type II attestation, which is a procedure that ensures we handle your data in a safe and secure manner. We are working with TEGO to complete this process.

In Phase One, we completed a pre-assessment/readiness report, identified key control gaps and established a foundation for the attestation process.

In Phase Two (our current phase), Strawbridge will, with assistance and support from TEGO:

  • Address and operationalize identified control gaps
  • Create and/or modify SOC 2-aligned policies and procedures to best meet requirements
  • Establish an Internal Audit plan and oversight process
  • Track and report progress on remediation efforts
  • Engage with a CPA for SOC 2 attestation fieldwork

In Phase Three, Strawbridge will engage with a CPA (Certified Public Accountant) for SOC 2 attestation fieldwork and reporting after completing Phase 2.

If you have any questions or concerns regarding your or your students’ privacy and data, please don’t hesitate to contact us.