---
title: "Example: FERPA Scan Playbook"
url: "https://dm0bkdes5q7a2ls.productfruits.help/en/article/example-ferpa-scan-playbook"
language: "en"
last_updated: "2026-06-24T22:36:32.981Z"
---

# Example: FERPA Scan Playbook

This sample FERPA scan playbook is an automated remediation workflow designed to identify, classify, and secure student-related sensitive data.

The following sample FERPA scan playbook is used by Spirion Sensitive Data Platform scans to provide an automated remediation workflow, detailed in the topics below.

![](https://cdn-assets.productfruits.com/fc542f58-36de-4d3b-8dbe-cc7ed0283fb3)

## 1\. Data Types (Detection Logic)

![](https://cdn-assets.productfruits.com/99609595-7c4a-4273-879b-2c6dc26f227c)

The playbook begins with a decision diamond named **"Student ID data?"**. The logic for this step identifies files containing instances of specific data types.

-   **Operator**: The logic uses an "Or" operator, so the file identified can contain ANY of the data types listed in the 1st, 2nd, or 3rd row.

First row (in screenshot):

-   **Bank Account Number**
-   **Credit Card Number**
-   **Date of Birth**
-   **Driver's License**
-   **Social Security Number**

Second row (in screenshot):

-   **GPA** (identified via a Regular Expression)
-   The custom data type "GPA" is a Regular Expression data type defined in "Settings > Global Data Types."  
      
    ![](https://cdn-assets.productfruits.com/c3e44df8-128d-4556-9569-78df6d728c16)

Third row (in screenshot):

-   **Student ID Example** (identified via a Regular Expression)
-   The custom data type "Student ID Example" is a Regular Expression data type defined in "Settings > Global Data Types."  
      
    ![](https://cdn-assets.productfruits.com/bea8b2cc-d8f7-4024-a76b-1c25859355ce)

## 2\. Target Scope & Initial Action

If the scan finds a match for the data types above (**Yes** path):

-   **Classification**: The playbook automatically applies a Spirion classification label named **FERPA** to the file. This is configured as an "Automated Action" to perform on the file and its metadata.
-   -   The **FERPA** classification is defined in Spirion Sensitive Data Platform under "Setings > Global Classifications."  
          
        ![](https://cdn-assets.productfruits.com/2c6e9060-2382-4922-b55d-2567d8e25239)
-   **Take No Action**: If no student ID data is found (**No** path), the playbook completes without further intervention.

## 3\. Remediation Actions (Secondary Logic)

![](https://cdn-assets.productfruits.com/2142bf50-5aae-424e-9b1b-f0724a6249c3)

After the initial FERPA classification, the playbook evaluates the recency or "freshness" of the data using a second decision point: **"Is this stale data?"**

-   **Stale Data Definition**: As shown in the third image, data is considered "stale" if its **Modify Date** is **On Or Before 01/01/2017**.
-   **Action for Stale Data (Yes path)**:
-   -   **Quarantine**: Files modified on or before January 1, 2017 are moved to a secure quarantine location as defined in the global application Scans Settings (see screenshot below). This removes the sensitive data from its original, potentially insecure location.  
          
        ![](https://cdn-assets.productfruits.com/fe21a364-877f-460d-a5e1-f46cdf07f35f)
-   **Action for Current Data (No path)**:
-   -   **MIP Label**: If the data is not stale (modified after 01/01/2017), the playbook applies a **Microsoft Information Protection (MIP)** label named **"Encrypted v11.0"**. This ensures that active student data is encrypted and protected while remaining in its original location.

## Summary of Workflow

1.  **Identify**: Look for any of the following:
2.  1.  Bank Accounts, Credit Card numbers, Date of Birth, Driver's license, GPA, or Student IDs
3.  **Classify**: Tag all matches with the label "FERPA".
4.  **Evaluate Age**: Check if the file was modified on or before January 1, 2017.
5.  **Secure**:
6.  -   If **Old**: Quarantine the file.
    -   If **New**: Apply Microsoft Encryption (MIP) label.

![](https://cdn-assets.productfruits.com/fc542f58-36de-4d3b-8dbe-cc7ed0283fb3)