Another excellent point, James. Exemption status continues to be a challenge and tends to be subject to interpretation of the "tests" used to make such determinations by position.
All regulations, including FERPA, GLB, and others (need I say Title IV???) are intense reading as you point out. Not only do they need to be reviewed but, policies and procedures must be designed to "operationalize" within the regulatory guidelines.