Every institution needs a good policy that covers records that takes into account FERPA, as well as State or other regulatory rules. Everyone at the school needs training on it, as well, but the policy should be user-friendly enough so that it can be referrenced quickly and easily. There's a lot going on with FERPA, and those who work directly with records will remember it all pretty easily, but those who don't (teachers, student services) will need help understanding how they can remain compliant.
