The U.S. Department of Education maintains an office that addresses complaints that educational institutions may have violated FERPA. More information about the complaint process can be obtained here:
U.S. Department of Education
Student Privacy Policy Office
400 Maryland Ave, SW
Washington, DC 20202-8520
FERPA.Complaints@ed.gov
https://studentprivacy.ed.gov/file-a-complaint