There is nothing in the Title IV regulations that would prevent a school from using a "drop box" or other similar document sharing services to collect verification and other student eligibility documents from students or parents.
According to guidance NASFAA has received from the U.S. Department of Education (ED), the use of any drop box method of collecting documents must comply with the standards of security necessary to protect the personally identifiable information (PII) that is being exchanged. You should confer with your school's information technology (IT) staff and contact ED's Privacy Technical Assistance Center (PTAC) for assistance as you implement policies and procedures to ensure your drop box system is adequate to protect the privacy of your students' data.
For additional resources, visit ED's Protecting Student Privacy website, particularly the Data Security and FSA Cyber Security Compliance pages.
P&P Builder: NASFAA’s Policies & Procedures (P&P) Builder guides you step-by-step through the creation of a centralized, accessible policies and procedures manual. This is included in the cost of NASFAA Value Plus membership. There is an additional cost for other membership levels.
AskRegs Q&As represent NASFAA's understanding of regulatory and compliance issues. They are FOR INTERNAL USE ONLY. While NASFAA believes AskRegs Q&As are accurate and factual, they have not been reviewed or approved by the U.S. Department of Education (ED). If you should need written confirmation of AskRegs information for audit or program review purposes, please contact your ED School Participation Division. NASFAA shall not be liable for technical or editorial errors or omissions contained herein; nor for incidental or consequential damages resulting from the furnishing, performance, or use of this material.