On every college and university campus, common themes weave throughout identity and access management (IAM) and its relationship to Family Educational Rights and Privacy Act (FERPA). Institutions approach IAM differently as there is not a one-size-fits-all solution. Nevertheless, all face common elements. Over the past few years, a number of workshops, conferences, and webinars have focused on identity management; these have helped identify key issues facing registrars and their staffs. Many believe the issues relating to the digital identification of individuals are a matter only for campus technology professionals. However, access to student record data in the student information system, in isolated department systems around campus, as well as in off-campus service partner databases clearly constitutes a registrar issue. Electronically, who gets access to what is an IAM issue that includes a combination of external mandates (e.g., laws), institutional policy, business process, and technology implementations that together enable and restrict the ability to use resources. Data and system stewards and technologists, among others, must link arms to do it right. Understanding "why" means understanding "how" digital identity affects much of what one does. This article discusses FERPA and IAM and the institution's role in the privacy, security, and management of information and identities. Rapidly changing technology makes it challenging to keep abreast of the privacy, security, and management of information and identities. Policy and leadership will be key during this time of change. Although governance tends to lag behind technological advancements, getting one's policy-making house in order will greatly ease IAM issues, even as they continue to become more complex. (Contains 1 table.)