FERPA & Cross-Listing: Groups Wrinkle

Community Champion
As a long-time Canvas Community member, I've been watching conversations about this topic at least as far back as this 2016 question by @John_LoweMy working understanding has been:

  • To support "convenience" combinations, manually apply (to each student) the setting "this user can only view students in their assigned course section(s)".
However, recently a colleague observed (and I've confirmed) a scenario I've not seen addressed:

  • If a course uses Groups, students are able to (always) see the names of, and (sometimes) interact with, students in other Sections, even when the section-visibility setting above is applied.
Thus, limiting users' visibility to same-section members in a Canvas course seems insufficient to prevent disclosure of other-section members' identities.

The narrative and screenshots below illustrate. (Screenshots taken from a "demo" course with fictional student names/accounts.)

In a Canvas course ("DEMO-101"), there are 2 Sections ("123" and "DEMO-101") [screenshot 1]. Student Ahayuta Achi is enrolled in Section "123", and can only view students in their assigned section [screenshot 2]. However, the instructor has created Groups in the Course. Ahayuta is able to view all Group members, regardless of their Section, and regardless of whether the instructor has populated the Groups manually, or automatically with the setting "Require group members to be in the same section" [screenshot 3]. 
Thus, Ahayuta can, by viewing Groups, discover the names of students enrolled in Sections of DEMO-101 different from their own Section.
screenshot 1screenshot 1
screenshot 2screenshot 2
screenshot 3screenshot 3
I'd love to know how others here have evaluated and/or responded to this situation. Thanks in advance for any thoughts!
Users who also had this question