FERPA in the Digital Age→

Regardless of how or where the information on students is stored, FERPA requires that the institution own and control the education record, which includes emails. - AACRAO