FERPA: FAQs

Education records are records that:

1. Directly relates to a student; and
2. Is maintained by ESU or institution or by a party acting for ESU.

Personally identifiable information includes but is not limited to: the student's name; the name of the student's parent or other family member; the address of the student or student's family; a personal identifier, such as the student's social security number; a list of personal characteristics that would make the student's identity easily traceable; or other information that would make the student's identity easily traceable.

The Family Policy Compliance Office (FPCO) of the U.S. Department of Education monitors schools for compliance. Students have the right to file complaints with the FPCO alleging failure by ESU to comply with the requirements of the Act. Failure to comply may result in a loss of federal funding for financial aid and educational grants and/or civil litigation.

FERPA applies to the education records of persons who are or have been in attendance, including students in cooperative programs, study abroad, or study elsewhere.

FERPA applies to all educational records in whatever medium which are

1. maintained by East Stroudsburg University (ESU) or by a party acting for the University, and
2. directly related to a student.

ESU may disclose education records without a student's prior written consent to school officials with legitimate educational interests. A school official has a legitimate educational interest if the official needs to review an education record in order to fulfill his or her professional responsibilities for the University.

Prior consent is not necessary to release or confirm "directory information", unless the student has placed a “non disclosure” or “confidential hold” request on his/her records. In addition, prior consent is not necessary under certain other conditions stated in FERPA, such as by court order or subpoena.

A full text of the law is available at the U.S. Department of Education.

At the K-12 school level, FERPA provides parents with the right to inspect and review their children’s education records, the right to seek to amend information in the records they believe to be inaccurate, misleading, or an invasion of privacy, and the right to consent to the disclosure of their children’s education records. When a student turns 18 years old or enters a postsecondary institution at any age, these rights under FERPA transfer from the student’s parents to the student. Under FERPA, a student to whom the rights have transferred is known as an “eligible student.” Although the law does say that the parents’ rights afforded by FERPA transfer to the “eligible student,” FERPA clearly provides ways in which an institution can share education records on the student with his or her parents.

While concerns have been expressed about the limitations on the release of information, there are exceptions to FERPA’s general rule that educational agencies and institutions subject to FERPA may not have a policy or practice of disclosing “education records” without the written consent of the parent (at the K-12 level) or the “eligible student.”

Under FERPA, schools may release any and all information to parents, without the consent of the eligible student, if the student is a dependent for tax purposes under the IRS rules.

The Department interprets FERPA to permit schools to disclose information from education records to parents if a health or safety emergency involves their son or daughter.

Another provision in FERPA permits a college or university to let parents of students under the age of 21 know when the student has violated any law or policy concerning the use or possession of alcohol or a controlled substance.

Additionally, under FERPA, schools may disclose information from “law enforcement unit records” to anyone – including parents or federal, State, or local law enforcement authorities – without the consent of the eligible student. Many colleges and universities have their own campus security units. Records created and maintained by these units for law enforcement purposes are exempt from the privacy restrictions of FERPA and can be shared with anyone.

Nothing in FERPA prohibits a school official from sharing with parents information that is based on that official’s personal knowledge or observation and that is not based on information contained in an education record. Therefore, FERPA would not prohibit a teacher or other school official from letting a parent know of their concern about their son or daughter that is based on their personal knowledge or observation.

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a law passed by Congress intended to establish transaction, security, privacy, and other standards to address concerns about the electronic exchange of health information. However, the HIPAA Privacy Rule excludes from its coverage those records that are protected by FERPA at school districts and postsecondary institutions that provide health or medical services to students. This is because Congress specifically addressed how education records should be protected under FERPA. For this reason, records that are protected by FERPA are not subject to the HIPAA Privacy Rule and may be shared with parents under the circumstances described above.

In all of our programs here at the Department of Education, we consistently encourage parents’ involvement in their children’s education. FERPA is no exception. While the privacy rights of all parents and adult students are very important, there are clear and straightforward ways under FERPA that institutions can disclose information to parents and keep them involved in the lives of their sons and daughters at school.