This guidance from the Department of Education’s Privacy Technical Assistance Center provides information on creating written agreements to obtain and use education data protected by FERPA. It contains lists of required terms and conditions as well as best practices.