Privacy Technical Assistance Center, Responsibilities of Third-Party Service Providers under FERPA (Aug. 2015) (full-text).