MEC Regulatory Compliance & Legal Framework 2 — Questions and Answers
Question 1: Under FERPA, which action requires written parental consent before a school may disclose student education records?
- Sharing records with the student's current teacher
- Releasing records to a non-school employer for a job application (Correct answer)
- Providing records to state education authorities for audit
- Transferring records to a school where the student is enrolling
Correct answer: Releasing records to a non-school employer for a job application
FERPA requires written consent to disclose records to third parties outside legitimate educational interest, such as employers, without a specific exception.
Question 2: A Moodle course contains a scanned textbook chapter uploaded by an instructor. Under US copyright law, which doctrine is most relevant when evaluating whether this is permissible?
- First sale doctrine
- Fair use doctrine (Correct answer)
- Public domain exception
- Creative Commons licensing
Correct answer: Fair use doctrine
Fair use is the primary doctrine courts apply when evaluating whether reproducing copyrighted material for educational purposes is permissible.
Question 3: Which WCAG 2.1 success criterion specifically addresses the requirement that all non-text content has a text alternative?
- 1.4.3 Contrast (Minimum)
- 1.1.1 Non-text Content (Correct answer)
- 2.1.1 Keyboard
- 3.1.1 Language of Page
Correct answer: 1.1.1 Non-text Content
WCAG 2.1 Success Criterion 1.1.1 requires that all non-text content presented to users has a text alternative serving an equivalent purpose.
Question 4: In the context of COPPA compliance, what age threshold determines whether an online educational service must obtain verifiable parental consent before collecting personal data?
- Under 16
- Under 13 (Correct answer)
- Under 18
- Under 14
Correct answer: Under 13
COPPA applies to children under 13, requiring verifiable parental consent before operators collect, use, or disclose their personal information.
Question 5: An institution wants to use a Moodle plugin that processes student data on a third-party server. Which agreement is legally essential before deployment under most US state privacy laws?
- End User License Agreement (EULA)
- Data Processing Agreement (DPA) (Correct answer)
- Memorandum of Understanding (MOU)
- Non-Disclosure Agreement (NDA)
Correct answer: Data Processing Agreement (DPA)
A Data Processing Agreement defines how a third-party processor handles personal data and is required by laws such as GDPR and many US state privacy statutes.
Question 6: Which Section 508 standard most directly applies to ensuring Moodle course videos are accessible to deaf or hard-of-hearing students?
- Providing audio descriptions for visual content
- Including synchronized captions for video content (Correct answer)
- Offering keyboard-only navigation
- Ensuring sufficient color contrast
Correct answer: Including synchronized captions for video content
Section 508 requires synchronized captions on video content so deaf or hard-of-hearing users can access the spoken information.
Question 7: An online course uses a proctoring tool that captures students' facial images during exams. Which legal framework most directly governs the collection of this biometric data in Illinois?
- FERPA
- HIPAA
- Illinois Biometric Information Privacy Act (BIPA) (Correct answer)
- COPPA
Correct answer: Illinois Biometric Information Privacy Act (BIPA)
Illinois BIPA specifically regulates the collection, storage, and use of biometric identifiers including facial geometry captured by proctoring software.
MEC Regulatory Compliance & Legal Framework 2
Under FERPA, which action requires written parental consent before a school may disclose student education records?