MIO: query student schedules from PeopleSoft

From Kim:

As long as a student is the only person who can see his/her own schedule, I don't see how this would be a problem (always thinking of FERPA).

Response from Justin:

We did plan on allowing someone other than the student to view the schedule for employee use only - such as figuring out when a student is available for a tech request or scheduling work schedules. In either case the amount of data would be limited - whether or not the student is in class or not. And we already have FERPA implemented in the portal, so we could have the system exclude the FERPA students. Although, we may only have that information for our residents...

Response from Kim:

I think you need to have an opt-in, assuming opt-in is allowed with FERPA. To be safe I'd run this past whoever is in charge of FERPA enforcement, probably Petra Roter or her staff, before I could release this information to you.

Response from Justin:

Talking with the programmer who wrote the Roster app that deals with FERPA, there is an opt-in flag stored in peoplesoft that we read into our database. If a student has opted into FERPA, than we do not release any of their private information to the public, but employees can still view their file. So, if that process is compliant with FERPA, than I think that it would be alright if the service checked the FERPA bit before releasing the information to the requester.

Of course, we probably should run this by someone who knows a bit more about the details of FERPA, but we can worry about that when it becomes a little more feasible to implement this feature.