united states - How should I address a potential FERPA violation by a professor?

In the United States, federal law prohibits professors from releasing any student's grades to any party other than the student and any party whom the student authorizes to receive the grades.

One of my professors appears to be violating this law by uploading each student's lab grades in one file, which is accessible to anyone who is enrolled in the class.

Here is my proposed plan of action:

1. 
   

   Ask the professor - in private - to post the grades using the online management system the professor already uses for other things.

   
   


2. 
   
   

   If the professor doesn't fix this privacy violation, inform the professor that the method by which he/she post grades is a violation of federal law.

   
   


3. 
   

   As a last resort, contact the department dean.