it regulates schools. If a school fails to impose adequate data protection requirements on its EdTech vendors, FERPA provides limited recourse. - **FERPA predates the data practices** it now governs. It was designed for paper records in filing cabinets, not for real-time behavioral tracking across d