Privacy in education isn’t just a matter of common sense, but the law. The Family Educational Rights and Privacy Act, better known as FERPA, gives students and parents the legal right to control who sees their school records.
And it’s been doing so since 1974. Whether you’re a college student wondering if your parents can see your grades or a parent of a high schooler requesting a copy of their transcript, FERPA outlines how that information can be shared, when, and with whom.
Key Highlights
- Schools need your written consent to share most personal student info.
- Directory info can be shared unless you opt out in writing.
- Parents lose access to records once a student turns 18 or enters college.
- You can request to review, correct, or file complaints about education records.
FERPA in a Nutshell
FERPA is a federal law that applies to almost all K-12 schools and colleges that receive U.S. Department of Education funding. That includes public schools, many private institutions, and nearly all colleges and universities in the U.S.
The core idea behind FERPA is simple: educational records belong to the student. Parents have rights too, but those rights shift once a student turns 18 or enrolls in college.
At that point, the student gets full control over their records. The law covers more than just report cards.
- Grades
- Attendance records
- Disciplinary history
- Psychological evaluations
- Health records held by the school
- Class schedules and transcripts
But it doesn’t apply to every scrap of information a school might have. Personal notes kept by a teacher and not shared with others? Not covered. Campus police reports? Not considered education records under FERPA either.
Your Core Rights Under FERPA
Here’s what parents and eligible students (those 18 or older or attending college) can do:
1. Inspect and Review Records
You can request to see your records. Schools have 45 days to let you review them. If you want a copy, they may charge a reasonable fee.
2. Request a Correction
If something in the record is wrong or misleading, you can ask the school to fix it. If they won’t, you’re entitled to a hearing-and if the decision still stands, you can add your own written statement to the record.
3. Consent to Disclosures
Schools need written permission to share personally identifiable information (PII) with anyone not authorized by FERPA. There are exceptions, though, which we’ll cover next.
4. File a Complaint
If your rights are violated, you can file a complaint with the U.S. Department of Education’s Family Policy Compliance Office.
When Schools Can Share Without Consent
FERPA allows schools to share certain information without asking for permission first-but only in specific cases.
| Category | Description | Example |
|---|---|---|
| Directory Information | Schools can publicly release info like your name, address, email, participation in sports, or awards, unless you opt out. Every school must notify students and parents of this option. | If you opt out, your name won’t appear in the yearbook or sports program. |
| School Officials | Teachers, counselors, or contractors working under school supervision can access your records if they have a legitimate educational reason. | A special education consultant reviewing a student’s IEP plan. |
| Transferring Schools | If a student transfers or applies to another school, the current school can send records without consent. | A high school sends transcripts directly to a college during the admissions process. |
| Financial Aid | Schools can share necessary info to determine a student’s eligibility or amount of financial aid. | A university sends financial aid records to a parent if the student is claimed as a dependent on taxes. |
| Emergencies | In a serious health or safety emergency, schools can release records to protect the student or others. | If a student is hospitalized after an overdose, the school may inform the parents. |
| Court Orders or Subpoenas | Schools must comply with subpoenas or legal orders, but they usually have to notify the student or parent first. | A judge orders a school to provide attendance records as part of a legal investigation. |
| Accrediting Bodies & Researchers | Colleges and schools can share records with accrediting organizations and researchers—but only under strict conditions and usually after removing identifying information. | |
| De-Identified Data | If all identifying info is removed, schools can use the data for research or reporting. |
What Schools Can’t Share Without Consent
Unless it falls under one of the exceptions listed above, schools can’t disclose anything that could identify a student. That includes:
- Grades
- Test scores
- Social Security numbers
- Disciplinary history
- Psychological records
Read More: Can my teacher look through my backpack? Learn your rights and how to defend yourself!
Common Confusions About FERPA
Personal Notes Aren’t Covered
A teacher’s private notes that aren’t shared or maintained by the school don’t count as part of a student’s education record.
Law Enforcement Records Are Separate
Reports made by school police are not protected by FERPA if they’re kept by the campus police department.
Social Media Isn’t Automatically Protected
If a student video is uploaded to a school’s official website and kept there, it could be considered part of the education record. But personal social media accounts are generally off the radar.
Special Cases and Modern Realities
K-12 vs. College
In K-12, parents hold the rights. Once a student turns 18 or enters college, those rights pass to the student-unless the student is still a tax dependent.
Homeschooling
FERPA usually doesn’t apply unless the student participates in public school programs.
Online Learning
The pandemic brought new attention to how schools handle data. Schools must now ensure that learning platforms, cloud storage, and video systems comply with FERPA too.
Third-Party Vendors
From Google Classroom to testing platforms, any outside service a school uses must meet FERPA standards. That includes protecting student data and not reusing it.
How to Use Your FERPA Rights
- To review your records: Contact your school’s registrar or principal’s office.
- To opt out of directory info: Send a written request to your school.
- To amend records: File a written correction request. If denied, ask for a hearing.
- To file a complaint: Visit studentprivacy.ed.gov/file-a-complaint or call (202) 260-3887.
Final Word
FERPA exists to give students and families control over private information. It helps protect everything from transcripts to test scores while still allowing for reasonable exceptions in emergencies or academic transitions.
Knowing how it works means knowing when to speak up, and how to keep your information exactly where it belongs. In your hands.