Debunking FERPA myths