What FERPA means for parcel locker data

Records that link a student to a package pickup are education records under FERPA. The locker vendor is processing those records on your behalf.

The standard mechanism is the school-official exception. Your contract must spell out the legitimate educational interest, the data the vendor may access, and the limits on further disclosure.

Minimum-necessary is the operating principle. A locker vendor needs identity, routing, and event data — not academic records, grades, or financial information.

Retention should be configured to your records retention schedule, not the vendor's default. Pickup events typically need to be retained for the duration of any potential dispute window plus your audit cycle.

Finally, your DPA should require breach notification timelines, sub-processor disclosure, and a clear right to retrieve and delete data at contract end.