FERPA Security Question

Hello, I have a bit of a new question that I haven’t seen talked about anywhere.

I made a website for a school who has a Gravity Form setup on the site that collects students names. Recently this school emailed me asking about what security precautions we take to comply with FERPA: http://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html

Would a student’s form submission be any kind of security threat?
Is there anything I can do to further protect this info? SSL? etc..

Thanks for your time!