Navigating Compliance Requirements for Online Educators
Bizee explains the compliance requirements for online educators — from student data privacy under FERPA to internet safety, worker classification, and recordkeeping.
Bizee Editorial Staff
Editorial Team
Introduction
Online educators face a specific set of compliance requirements — student data privacy under federal law, internet safety rules, worker classification, and recordkeeping. Understanding which rules apply to your business depends on who you teach, how you deliver instruction, and whether you hire other educators to help.
What compliance means for online educators
Compliance for online educators means meeting the federal and state rules that govern how you collect and protect student data, deliver instruction safely, classify the people who work with you, and keep business records. The specific requirements depend on your student population, your platform, and whether you receive federal funding.
Most online educators need to think about 4 core areas: student data privacy, internet safety, worker classification, and documentation. Each area has its own rules, and getting any of them wrong can put your business — and your students — at risk.
- Student data privacy — how you collect, store, and share student information
- Internet safety — filtering and safety policies if you serve minors through federally funded programs
- Worker classification — whether the educators you hire are employees or independent contractors
- Recordkeeping — the documentation your business needs to stay in good standing
Why compliance matters for your online education business
Online educators who skip compliance requirements don't just face fines — they can lose access to federal funding, face lawsuits from students or parents, and damage the trust that makes an education business work. The stakes are higher when you're handling student data, because that information belongs to real people.
The Family Educational Rights and Privacy Act (FERPA) is the federal law that protects the privacy of student education records. It applies to educational institutions and agencies that receive funding under programs administered by the U.S. Department of Education. If your platform or institution falls under FERPA, you're responsible for how student data is handled — including by any third-party tools you use.
Most independent online educators and tutors don't receive federal funding directly, so FERPA may not apply to them. But that doesn't mean student data is unprotected — state privacy laws and your own platform's terms of service still govern what you can do with student information. The line between covered and not covered is worth checking with a legal professional if you're unsure.
How compliance works in practice
Staying compliant as an online educator means building a few habits into how you run your business — not just checking boxes once at the start. The requirements that apply to you depend on your setup, but these are the areas that come up most often.
Student data privacy
If you're covered by FERPA, education records include any records directly related to a student and maintained by your institution or a party acting for it. That includes grades, attendance, and any personally identifiable information stored in your learning management system. Your platform needs safeguards to prevent unauthorized access or disclosure.
Third-party tools — video platforms, quiz software, communication apps — are also subject to FERPA requirements when they handle student data on your behalf. Before you add a new tool to your workflow, check whether it meets the data protection standards your institution requires.
Internet safety for minors
The Children's Internet Protection Act (CIPA) applies to schools and libraries that receive discounts under the federal E-rate program for internet access. If your institution participates in E-rate, you need to certify that you have an internet safety policy in place — including filtering technology that blocks obscene content, child pornography, and material harmful to minors on all computers with internet access.
CIPA also requires internet safety policies to cover education on appropriate online behavior, including cyberbullying awareness. Independent tutors who don't receive E-rate funding aren't covered by CIPA — but if you teach minors, building clear safety policies into your platform is still good practice.
Worker classification
If you hire other educators to teach under your brand, you need to figure out whether they're employees or independent contractors. The IRS and the Department of Labor use different tests, but both look at how much control you have over the work, whether the person works for other clients, and whether the relationship is ongoing.
Getting it wrong is expensive. If the IRS determines that a contractor should have been classified as an employee, your business can owe back payroll taxes, unpaid Social Security and Medicare contributions, plus penalties and interest. Employees receive a Form W-2 by January 31. Independent contractors who earn $600 or more receive a Form 1099-NEC.
Recordkeeping and documentation
Good recordkeeping is one of the things that separates a business that survives an audit from one that doesn't. For online educators, that means keeping records of student enrollment, payment history, contractor agreements, and any data-sharing arrangements with third-party platforms. If you hire employees, you also need to verify their eligibility to work in the U.S. using Form I-9.
The specific records you need to keep — and for how long — depend on your state and the federal programs you participate in. A tax professional can help you figure out what your business needs to document and how long to keep it.
FAQ
Generally, no. FERPA applies to educational institutions and agencies that receive funding under programs administered by the U.S. Department of Education. Independent tutors who don't receive federal funding aren't directly covered. That said, state privacy laws may still apply, and any platform you use to store student information has its own data protection obligations.
It depends on what and where you teach. Independent tutors and course creators generally don't need a teaching certification to sell instruction online. But if you're teaching at an accredited institution, working with K-12 students through a school district, or operating in a state with specific licensing rules for educators, certification requirements may apply. Check with your state's department of education for the rules in your area.
It depends. CIPA applies to schools and libraries that receive discounts under the federal E-rate program. If your tutoring business doesn't participate in E-rate, CIPA doesn't apply directly. But if you teach minors, building internet safety policies into your platform — including content filtering and cyberbullying education — is still a sound practice regardless of whether the law requires it.
It depends on how the working relationship is structured. The IRS looks at how much control you have over the work, whether the tutor works for other clients, and how permanent the relationship is. If you set the schedule, provide the curriculum, and the tutor works exclusively for you, the IRS may view them as an employee. A tax professional can help you figure out the right classification for your situation.
The core compliance areas for online educators are student data privacy, internet safety, worker classification, recordkeeping, and — depending on your state — educator certification or state authorization. Not every area applies to every educator. The rules that apply to you depend on who you teach, whether you receive federal funding, and whether you hire other people to deliver instruction.
Generally, no federal law requires background checks for general hiring. But if you use a third-party screening company, the Fair Credit Reporting Act (FCRA) governs how that process works — including getting written consent from the applicant before running the check. Some states have additional rules. If you're hiring educators who work with minors, background checks are standard practice even when not legally required.
