An unauthorized person retrieves information from a computer screen that was left unattended. Under FERPA, is the institution and the person whose computer was left unattended responsible?

YES NO