Consulting Agreement for Education

The unique risks of education consulting

Four things define education consulting risk. First, FERPA. The Family Educational Rights and Privacy Act (20 USC 1232g, regulations at 34 CFR Part 99) prohibits disclosure of personally identifiable information from education records without parent/eligible student consent — with limited exceptions, the most important of which for consultants is the "school official with legitimate educational interest" exception at 34 CFR 99.31(a)(1). The institution must have a written annual notification describing what constitutes a "school official" including third-party contractors, and the contracting agreement is the operational evidence. ED can withhold federal funds for FERPA violations, and the 2024 amendments to Part 99 tightened "directory information" treatment and post-violation cure procedures.

Second, children's online privacy. COPPA (15 USC 6501-6506) and the FTC's COPPA Rule (16 CFR Part 312) — significantly amended by the FTC's January 2025 final rule (effective June 23, 2025 with one-year transition) — require verifiable parental consent before collection of personal information from under-13s online. The 2025 amendments add new restrictions on push notifications, biometric data, and AI training, and expand the "personal information" definition. School consent on behalf of parents is permitted under FTC guidance but only for educational purposes and only when the school controls the data use; commercial uses void the school-consent doctrine.

Third, accessibility. DOJ's April 24, 2024 final rule on Title II web accessibility (28 CFR Part 35) requires public entities (including public schools, community colleges, public universities) to make web content and mobile apps conform to WCAG 2.1 Level AA — effective April 24, 2026 for entities with populations of 50,000+, April 26, 2027 for smaller and special districts. Section 504 of the Rehabilitation Act (29 USC 794) and the Department of Education's May 9, 2024 final rule (89 FR 40066) expanded Section 504 obligations. ED OCR resolution agreements in 2023-2025 have repeatedly named third-party content vendors as responsible parties.

Fourth, higher-ed and federal-aid sensitivity. For institutions receiving federal Title IV funds, the Higher Education Act incentive compensation ban (20 USC 1094(a)(20), 34 CFR 668.14(b)(22)) prohibits any "commission, bonus, or other incentive payment" to a person "directly or indirectly" based on success in securing enrollments or financial aid. Enrollment management consultants paid on a percentage of new tuition or enrollment-count basis can put the institution out of Title IV eligibility. ED's 2010-2011 guidance narrowed the prior "safe harbors" and the 2023-2024 enforcement environment has been active.

Industry-specific clauses to include

• FERPA School Official Designation (34 CFR 99.31(a)(1)): Consultant is designated as a "school official" with a "legitimate educational interest" in the education records to which access is granted; consultant is under direct control of the institution with respect to use and maintenance of education records; consultant uses PII from education records only for authorized purposes; consultant does not redisclose PII to any third party without explicit institutional authorization or consent.
• Annual FERPA Notification Coverage: Institution will include consultant within its annual FERPA notification under 34 CFR 99.7; consultant supports the institution's response to parent/eligible student inspection requests under 34 CFR 99.10 and amendment requests under 34 CFR 99.20.
• COPPA Compliance (16 CFR Part 312, as amended January 2025): If consultant operates an online service directed to under-13s or collects personal information knowing the child is under 13, consultant provides COPPA-compliant notice and obtains verifiable parental consent (or school consent for educational purposes per FTC guidance); complies with the 2025 amendments on push notifications, biometric data, and AI training; data minimization, retention, and deletion at 16 CFR 312.10.
• State Student Data Privacy Compliance: If services touch students of California, Colorado, Connecticut, Illinois, Maryland, New Hampshire, New York, Oregon, Texas, Washington, or other state-law jurisdictions, consultant complies with applicable laws: NY Education Law §2-d (parents' bill of rights), Cal. BPC 22584 SOPIPA, CO SB 21-205, IL SOPPA (105 ILCS 85), MD SBOE Student Data Privacy Act, WA SHB 1493, TX HB 18 SCOPE Act (with carve-outs for school use). No targeted advertising to students; no sale of student data; no use of student data to build commercial profiles.
• Title II / Section 504 Accessibility (DOJ April 2024 Rule, 28 CFR Part 35): If deliverables include web content, mobile apps, documents, video, or learning materials for a public entity, deliverables conform to WCAG 2.1 Level AA per DOJ's April 24, 2024 final rule effective for the institution's compliance date (April 24, 2026 for 50,000+ entities, April 26, 2027 for smaller); Section 508 alignment for federal-funded projects; alternative-format provision for individuals with disabilities.
• Higher Education Act Incentive Compensation Compliance (20 USC 1094(a)(20)): For Title IV institutions, consultant compensation is NOT based on success in securing student enrollment or financial aid; consultant will not provide enrollment or admissions services in a manner that triggers ED's incentive compensation rules at 34 CFR 668.14(b)(22).
• Title IX Cooperation: Consultant complies with the institution's Title IX policies (20 USC 1681; 34 CFR Part 106, with the 2024 final regulations in pending litigation and various states under preliminary injunction); reports any sexual misconduct under 20 USC 1681(a) consistent with the institution's response protocol.
• Background Check & Mandatory Reporter: If services involve unsupervised contact with minors, consultant submits to state-required background check (varies by state — typically Live Scan / fingerprint + Megan's Law registry); consultant acknowledges mandatory reporter status under state child abuse reporting statute.
• HIPAA Carve-Out (if applicable): Where consultant accesses student health records that are NOT FERPA-protected education records (e.g., post-secondary student health center treatment records subject to HIPAA, school-based health services), HIPAA BAA per 45 CFR 164.504(e) signed alongside.
• Public Procurement & Contract Authority: Consultant warrants the agreement was signed by an authorized institution officer; consultant acknowledges that for public K-12 districts, public community colleges, and public universities, the agreement may be subject to board approval, state procurement law, sunshine/public records law, and budget appropriation; cooperation with public records act requests as applicable.
• IP & Curriculum Ownership: Institution gets ownership (work-for-hire under 17 USC 201(b) + present assignment) of curriculum, lesson plans, assessments, training materials, and recorded lectures created specifically for the engagement; consultant retains pre-existing methodology and templates with license-back; address Creative Commons licensing if deliverables will be openly licensed.
• Insurance Schedule: Professional Liability / E&O $2M/$5M; General Liability $1M/$2M (occurrence form) for any on-site presence; Sexual Misconduct & Molestation rider for any work involving minors; Cyber Liability $5M+ if student data is in scope.

Common mistakes in education consulting agreements

• No school-official designation for a vendor with SIS access. A consultant who gets an SIS export without the FERPA school-official designation is a federal violation. The contract must designate, document control, and limit use.
• Enrollment consultant paid on a percentage of new tuition. 20 USC 1094(a)(20) bans incentive compensation tied to enrollment or financial aid success at Title IV institutions. ED has terminated Title IV eligibility for noncompliant practices. Use hourly or fixed-fee structures.
• Skipping the WCAG 2.1 AA requirement for a public entity deliverable. DOJ's April 2024 Title II rule has hard compliance dates (April 2026 and April 2027). OCR resolution agreements have specifically named third-party content vendors.
• Using consumer ChatGPT or Gemini on student data. Most state student data privacy laws prohibit "targeted advertising" and commercial profile-building from student data. Consumer-tier AI tools that train on inputs violate this. Require enterprise tier with no-training settings or prohibit AI use on student data entirely.
• No state-specific compliance for multi-state engagements. NY 2-d, IL SOPPA, CO SB 21-205, CA SOPIPA, TX SCOPE Act each have different requirements. A multi-state consultant needs to comply with all applicable state laws, not just the most lenient.
• Letting a non-credentialed consultant deliver counseling, special education, or licensed instruction. A consultant who advises school counseling workflow design but starts counseling students directly may need a license. The contract should expressly exclude licensed services unless the consultant is credentialed.
• Missing mandatory reporter language. All 50 states have child abuse mandatory reporter statutes that may sweep in school consultants. The contract should acknowledge mandatory reporter status and the institution's reporting protocol.
• No accessibility clause for digital content deliverables. A consultant delivers a beautifully designed PD deck that fails WCAG. The institution either rejects the deliverable, or remediates it at significant cost. Build accessibility into acceptance criteria.

Regulatory landscape

Federal education core: FERPA (20 USC 1232g) and regulations at 34 CFR Part 99 (with 2008 and 2011 amendments expanding "school officials" to include third-party contractors and "directory information" treatment); Higher Education Act Title IV (20 USC 1070 et seq.) including incentive compensation ban at 1094(a)(20) implemented at 34 CFR 668.14(b)(22); Title IX (20 USC 1681) and regulations at 34 CFR Part 106 (with 2024 final regulations in extensive litigation and various states enjoined); Title VI Civil Rights Act (42 USC 2000d); IDEA (20 USC 1400 et seq., 34 CFR Part 300) for special education; ESSA (Every Student Succeeds Act, 20 USC 6301 et seq.); Carl Perkins (Strengthening Career and Technical Education for the 21st Century Act, 20 USC 2301 et seq.); McKinney-Vento (42 USC 11431 et seq.) for homeless education.

Children's privacy: COPPA (15 USC 6501-6506) and FTC's COPPA Rule (16 CFR Part 312) with the January 2025 final amendments (effective June 23, 2025 with one-year transition); FTC's policy statement on COPPA enforcement (June 2024). California Age-Appropriate Design Code Act (Cal. BPC 22675) partially enjoined but ongoing.

Accessibility: ADA Title II (42 USC 12131 et seq.) and DOJ's April 24, 2024 final rule on web accessibility at 28 CFR Part 35 (compliance April 24, 2026 for 50,000+ population, April 26, 2027 smaller); ADA Title III (42 USC 12181) for places of public accommodation including private schools; Section 504 of the Rehabilitation Act (29 USC 794) and ED's May 9, 2024 final rule at 34 CFR Part 104; Section 508 (29 USC 794d) for federal agencies and federally funded; WCAG 2.1 Level AA (or Level AAA in some state laws like CA AB 434 for state agencies).

State student data privacy (varies by state, common themes): New York Education Law §2-d ("Parents Bill of Rights"); California Student Online Personal Information Protection Act (Cal. BPC 22584) and California AB 1584 student information clause; Colorado SB 21-205 (Student Data Transparency & Security Act); Connecticut C.G.S. 10-234aa; Illinois Student Online Personal Protection Act (105 ILCS 85); Maryland State Board of Education Student Data Privacy Act; Texas HB 18 SCOPE Act (effective September 1, 2024); Washington SHB 1493 (effective September 2024). Many states adopted SOPIPA-style provisions.

Higher-ed accreditation and other: HEA accreditation framework (20 USC 1099b); Cleary Act (20 USC 1092(f)); FERPA in higher-ed context; institutional research compliance (45 CFR Part 46 Common Rule on human subjects research); export controls applicable to research (ITAR/EAR); state teacher and counselor licensure boards; state special-education-specific laws (e.g., NY CSE/CPSE procedural protections); state homeschool / private school laws.

Sample fee structure

US education consulting fee benchmarks for 2025–2026:

• K-12 instructional / curriculum consultant: $150–$300/hour; full curriculum design $25,000–$120,000.
• SEL / MTSS / RTI specialist: $200–$400/hour; full district implementation $80,000–$400,000.
• Special education / IDEA consultant: $200–$450/hour; full district program review $60,000–$300,000.
• Higher ed enrollment management: $300–$600/hour; carefully structured to avoid incentive compensation ban — flat retainer plus capped success bonus may pass HEA scrutiny but percentage-of-tuition does not.
• Higher ed accreditation consultant: $25,000–$120,000 flat per accreditation cycle for self-study and site visit support.
• Edtech implementation consultant: $150–$400/hour; full district LMS rollout $80,000–$400,000.
• K-12 ed-tech procurement / data privacy consultant: $150–$300/hour; full district vendor assessment $40,000–$150,000.
• WCAG 2.1 AA accessibility audit/remediation: $5,000–$50,000 per LMS/site/app audit + remediation hourly $150–$300/hour.
• School strategy / superintendent search consultant: $25,000–$80,000 flat per search.
• State / federal funding application consultant (Title I, ESSER, IDEA, Perkins): $150–$350/hour or $15,000–$80,000 per major application.
• Big Four / strategy consultancy (district transformation): day rates $3,000–$6,000 for senior managers; full transformation programs $500,000–$5M.

For higher-ed enrollment work, structure compensation as hourly or flat-fee to avoid 20 USC 1094(a)(20) incentive compensation issues. ED's 2010-2011 narrowing of the prior safe harbors means there is no "carve-out" for outsourced functions, profit-sharing, or even technology-driven enrollment work tied to outcomes. The safest fee structure is decoupled from enrollment success metrics.

How to draft this in Word with LexDraft

Open the LexDraft add-in inside Word and start from the consulting agreement template, then insert the FERPA school-official designation, COPPA compliance, state student data privacy compliance, ADA Title II / Section 504 accessibility, Title IV incentive compensation ban (for higher-ed), background check and mandatory reporter, and public procurement clauses from the clause library. For early-stage pilot or proof-of-concept discussions with a district or institution, the NDA template covers pre-engagement confidentiality. The broader templates library covers structuring across instructional, operational, and accreditation workstreams. Comparing drafting tools? See LexDraft vs Spellbook.

Frequently asked questions