General Counsel

Student Records: Family Educational Rights and Privacy Act (FERPA)

This document provides a summary of the law in this area and answers questions frequently asked of attorneys in the Office of General Counsel. However, the information presented here is intended for informational purposes only and nothing in this document should be construed or relied upon as legal advice. The Office of General Counsel or Campus Legal Counsel should be consulted regarding the specific facts and circumstances associated with any legal matter.

The federal Family Educational Rights and Privacy Act of 1974, known as "FERPA," (20 U.S.C. § 1232g; 34C.F.R. Part 99) governs access to student education records maintained by educational institutions, including the University of Wisconsin System. FERPA's purpose is to protect the privacy of students and to ensure that students have access to their own records. Under FERPA, the presumption is that a student's records are private and not available to the public without the consent of the student. UW System employees responding to requests for student information must be aware of the unique, protected status of such information. Employees must not provide requested information unless the student consents to the release, or the information falls within a specific FERPA provision permitting release without consent. Thus, FERPA analysis is the converse of the usual approach under the Wisconsin Public Records Law which presumes records to be opened.

Definitions

Education records. FERPA protects from disclosure "education records," broadly defined to include all records directly related to a student and maintained by an educational institution or someone acting on its behalf (e.g., contractors).

NOTE: Student disciplinary records are included within the definition of education records. However, the definition excludes several other types of information including:

  • campus law enforcement records (if certain criteria are met);
  • certain "desk drawer" notes;
  • certain medical treatment records; and
  • alumni records containing information obtained after a student's graduation.

Student. FERPA defines "student" broadly to include any individual who has attended an educational institution at any time and about whom the institution maintains records.

Directory information. Directory information is defined as information that would generally not be considered harmful or an invasion of privacy if disclosed, such as:

  • name;
  • address (e-mail or other);
  • telephone number; and
  • degree received.

NOTE: Social Security numbers are not considered directory information.

Students must have notice of what the institution considers directory information and an opportunity to object to disclosure of all or part of the proposed directory information. Because each student has the individual right to object, all student files should be checked for disclosure limitations before directory information is compiled and made available.

Accessing Education Records

Student access to the student's own education records. Students generally may access their own education records, except for the following information:

  • parent financial records (often submitted as part of a financial aid application);
  • confidential letters of recommendation (under certain circumstances); and
  • information about another individual included in the student's records.

The institution must remove such information before providing records to the student, unless it obtains consent from the subject of the information or from the author of the letters of recommendation.

Parental access to student education records. Parents of students 18 years of age or older or attending a post-secondary institution may not access student education records without student consent.

Public access to student education records. Generally, FERPA's protection means that the public cannot access a student's education records without that student's valid consent.

Valid student consent. A student's valid consent means an informed, written consent which:

  • specifies the records to be disclosed;
  • states the reason for disclosing the records; and
  • identifies the person(s) to whom disclosure may be made.

Disclosures permitted without consent. An institution may disclose student education records without the student's consent in limited circumstances. Examples include disclosure to:

  • School officials with a legitimate educational interest
  • Other schools at which the student seeks admission or intends to enroll (the student must have notice and certain procedures must be followed)
  • Organizations conducting studies on behalf of the institution (if certain criteria are met)
  • Accrediting organizations
  • The parent of a dependent student
  • A person who obtains a judicial order or subpoena directing release of the information (the student must be given notice of the subpoena prior to releasing information unless the subpoena directs otherwise)
  • Appropriate individuals during a health or safety emergency
  • A person requesting "directory information"
  • An alleged victim of a crime of violence or non-forcible sex offense committed by a student regarding the results of any disciplinary action
  • The parents of a student disciplined for certain drug or alcohol offenses

NOTE: FERPA permits, but does not require, these disclosures. When disclosure is contemplated under these provisions of FERPA, it may be appropriate to consult with counsel to apply the balancing and notification requirements of the Wisconsin Public Records Law.

Other Provisions

Record of disclosures. As part of the education record of each student, each institution must maintain a record of disclosures which contains the following information:

  • the names of all individuals, agencies, or organizations that have requested, or obtained, access to the student's records and
  • the legitimate educational interest of those accessing the information.

However, there is no need to record:

  • access by the institution's own employees;
  • release of "directory information"; or
  • release of information with a student's written consent.

Notice of FERPA rights. Institutions must notify students annually of their rights under FERPA.

Penalties for violation of FERPA. Penalties for uncorrected violations may include a cutoff of federal funding to the institution.

Military access to education records. The Solomon Amendment (10 U.S.C. § 982; 32 C.F.R. 216, 65 F.R. 2056) is not a part of FERPA, but it allows military organizations access to information ordinarily restricted under FERPA for the purpose of military recruiting. Specifically, the Solomon Amendment permits Department of Defense entities to physically access institutional facilities to recruit students, and to obtain students' names, addresses, phone numbers, age, class, and degree program once every term. Institutions are exempt from these requirements if they do not collect this information, or if they do not normally provide this information to prospective employers. The Solomon Amendment only applies to enrolled students over age 17.

Institutions that violate the Solomon Amendment risk loss of funding from several federal agencies, including the Departments of Defense, Education, Health and Human Services, and Labor. If a component of the institution violates the Solomon Amendment, larger system funding may be affected.

Other Information

If you would like to learn more about the Federal Family Educational Rights and Privacy Act, the Catholic University of America (C.U.A.) has a very informative site. http://counsel.cua.edu/Ferpa/Ferpa.htm

The CUA FERPA WebCT Tutorial is a particularly interesting and interactive tutorial.

Note: UW System policies on FERPA and Wisconsin law on student records differ from C.U.A. policies. Therefore, the Office of General Counsel provides this link to the C.U.A. web site for informational purposes only. UW System employees with specific student records questions should consult with System or Campus Legal Counsel.

Return to Top