re: Ole Miss pushing its luck with the NCAA

There is no private cause of action for FERPA violations. All that the student whose privacy rights under FERPA have been infringed can do is to file a complaint with the U.S. Department of Education. The Education Department then can investigate and reprimand the school of there is an intentional violation. If not intentional, the department will usually recommend policy changes and improvements to procedures to protect the student's privacy. If the school does not correct its practices and policies and/or continues to violate privacy rights, the federal funds for student loans can be cut off. Rarely would that ever happen.