FERPA Basics for Faculty and Staff
The Essence of FERPA
- Federal law designed to protect the privacy of education records. It also provides guidelines for appropriately using and releasing student education records.
- It is intended that students' rights be broadly defined and applied. Therefore, consider the student as the "owner" of his or her education record, and the institution as the "custodian" of that record.
The Basic Rules
Review the following information:
- Student educational records are considered confidential and may not be released without the written consent of the student.
- As a faculty or staff member, you have a responsibility to protect educational records in your possession.
- Some information is considered public (sometimes called “directory information”); this info can be released without the student’s written permission; however, the student may opt to consider this info confidential as well; directory information is a student’s name, class standing, school/division, major field of study, dates of attendance, degrees and awards, recognized student activities, sports, athletics information, and current enrollment status; a student’s address and telephone number are also public information unless they have filed a form with the registrar to keep these private.
- You have access to information only for legitimate use in completion of your responsibilities as a university employee; “need to know” is the basic principle.
- If you are ever in doubt, do not release any information until you contact the Office of the Registrar at 260-481-6815 or [email protected]; the Office of the Registrar is responsible for student record information.
In preparation for completing your FERPA certification, please review the FERPA training materials.
EDUCATION RECORDS: Include any record maintained by the institution that is related to the student (in whatever format or medium) with some narrowly defined exceptions:
- Records in the "sole possession of the maker" (e.g., private advising notes).
- Law enforcement records created by a law enforcement agency for that purpose.
- Employment records (unless the employment is based on student status). The employment records of student employees (e.g., work-study, wages, graduate teaching associates) are part of their education records.
- Medical/psychological treatment records (e.g., from a health or counseling center).
- Alumni records (i.e., those created after the student was enrolled).
DIRECTORY INFORMATION: Those data items that are publicly releasable, so long as the student does not have a "No Release" on his or her record. Each institution establishes what it considers to be directory information. At Purdue University directory information includes: name, address (local, home and e-mail), telephone (local and home), college/school and curriculum, enrollment status and credit hour load, dates of attendance, classification, receipt or non-receipt of degree, academic awards received (dean's list, honors students), participation in officially recognized activities, sports photograph, and position, weight, and height of athletes.
- Directory information cannot include: race, gender, SSN, grades, GPA, country of citizenship, or religion.
- Every student must be given the opportunity to have Directory Information suppressed from public release. The information suppression is referred to as a "No Release. Everyone within the institution must respect a student's No Release request.
PARENT: With reference to FERPA, the term "parent" refers to either parent if the student is financially dependent based upon IRS definition. Purdue may disclose education records to parents if they can demonstrate to the Office of the Registrar that the student is claimed as a dependent for tax purposes.
When do FERPA rights begin?
A FERPA-related college education record begins for a student when he or she becomes 18 or enrolls in a higher education institution at any age.
Basic Rights of Students
- Notification of their FERPA rights at least annually.
- Inspect and review their records.
- Amend an incorrect record.
- Consent to disclosure (with exceptions).
Every institution must notify students of their basic FERPA rights at least annually.
- Purdue Fort Wayne’s annual notice can be found on the Registrar's web site under FERPA, Annual Notification of Student Rights.
Inspection and Review
Students have the right to see everything in their "education record," except:
- Information about other students
- Financial records of their parents/guardians
- Confidential letters of recommendation if they have waived their right of access. (Requiring a waiver of access is not allowed.)
There is not a records retention policy under FERPA. FERPA regulations do not state what records you must create or retain or how long you must keep them. Those are institutional decisions. You cannot destroy records once they are requested.
Right to Consent to Disclosure
All students have the right to control to whom their education record is released. There are several exceptions to when that permission is not required. In order to release their education record, a student must provide a signed and dated written consent specifically stating what records are to be released, the purpose of the disclosure, and the party to whom the disclosure is being made. Regulations provide flexibility for utilizing electronic signatures.
When is Prior Consent Not Required?
The institution may release records without consent, but is not required to do so. Some examples of the exceptions for having a release include:
- "School officials" with a "legitimate educational interest"/"need to know;" Employees and legal agents have access to education records in order to perform their official, educationally-related duties.
- Disclosure to another institution where student seeks to enroll or is enrolled;
- Disclosure to the Department of Education, state/local education authorities;
- Disclosure in connection with the receipt of financial aid (validating eligibility), including veteran's benefits;
- Disclosure to state/local officials in conjunction with legislative requirements;
- Disclosure to organizations conducting studies to improve instruction, or to accrediting organizations;
- Disclosure to parents of dependent students (IRS definition);
- To comply with a judicial order or lawfully issued subpoena;
- Disclosure for a health/safety emergency;
- Disclosure of directory information;
- Disciplinary information (Warner Amendment):
- Disclosure to the alleged victim, information from disciplinary proceedings;
- Only when found in violation, and only for crimes of violence--release of name, sanction and outcome (public information); and
- Disclosure to parents of any student under the age of 21, a violation of federal, state, local or institutional laws/regulations related to substance abuse (Foley Amendment).
FERPA rights (and the right to privacy) end at death, unless otherwise specified by state law.
Students have a formal right to file a complaint with the Department of Education.
Special Don'ts For Faculty
To avoid violating FERPA rules, do not do any of the following:
- Use a part of or the entire student identification number or Social Security number of a student in a public posting of grades
- Link the name of a student with that student’s identification number or Social Security number in any public manner
- Leave graded tests in a stack for students to pick up by sorting through the papers of all students
- Circulate a printed class list with student name and student identification number, or Social Security number or grades, as an attendance roster
- Discuss the progress of a student with anyone other than the student (including parents) without the consent of the student
- Provide anyone with lists of students enrolled in your classes for any commercial purpose
- Provide anyone with student schedules or assist anyone other than university employees in finding a student on campus
Key Resources for Additional Information:
- Office of the Registrar
- FERPA Certification
- AACRAO (Federal Relations)
- Family Compliance Office of the Department of Education (administers FERPA compliance)
- Rooker, LeRoy, and Tina M. Falkner. AACRAO 2012 FERPA Guide. American Association of Collegiate Registrars and Admissions Officers, 2012.