Under all conditions, the official text of the Act shall prevail.
Rule of Thumb: If in doubt, don't give it out! Let the Office of the Registrar determine the legal course of action.
FERPA for Faculty Quick Reference
What is FERPA?
FERPA is the Family Educational Rights and Privacy Act passed by Congress in 1974. FERPA is designed to protect the privacy of students by limiting third party access to student education records. Maintaining confidentiality of student records is everyone's responsibility whether you are faculty, staff or student. As a general principle, you may not disclose student information in oral, written, or electronic form to anyone except LMU staff and faculty who have a legitimate educational need to know the information in order to perform their University functions.
Penalties for Violation of FERPA
The Family Policy Compliance Office (FPCO) of the Department of Education reviews and investigates complaints of alleged violations of FERPA. If the (FPCO) Office finds that there has been a failure to comply with FERPA, it will notify the institution about the corrections that need to be made to bring the institution into compliance. The FPCO will then establish a reasonable period of time for the institution to voluntarily accomplish the specified changes. If the Secretary of Education finds that, after this reasonable period of time, an institution has failed to comply with FERPA and determines that compliance cannot be secured by any means, he or she can, among other options, direct that no federal funds (financial aid, education grants, etc.) be made available to that institution.
Parental and Third Party Access to Student’s Educational Record
When a student reaches the age of 18 or begins attending a postsecondary institution, regardless of age, FERPA rights transfer from the parent to the student.
FERPA gives students the following rights regarding educational records:
- The right to access education records kept by the school
- The right to amend education records
- The right to request that education records be disclosed only with student consent
- The right to file complaints for unauthorized disclosure of education records
Students have a right to know about the purpose, content, and location of information kept as a part of their education records. They also have a right to expect that information in their education records will be kept confidential unless they give permission to the University to disclose such information, or if a limited number of exceptions apply. Therefore, it is important to understand how education records are defined under FERPA.
What is an education record?
FERPA defines education records as records that are directly related to a student; are maintained, in whatever format or medium, by an educational institution or by a party acting for the institution; and contain information that is personally identifiable to a student.
Education records do NOT pertain to:
- Records in the sole possession of the maker (e.g. private advising notes).
- Law enforcement records created and maintained by the public safety office for law enforcement or public safety purposes.
- Employment records except where contingent upon, e.g., work-study and wages.
- Medical/psychological treatment records from a health or counseling center.
- Alumni records which are created after the student graduates or leaves the University.
There are two classes of education records
Education records are divided into two classes: directory information and non-directory information. Therefore, it is important to know the type of educational record that is being considered for disclosure.
What is Directory Information?
“Directory information [is] information contained in an education record of a student that would not generally be considered harmful or an invasion of privacy if disclosed.” (FERPA Regulations, Code of Federal Regulations, Title 34, Part 99.3). FERPA permits disclosure of directory information without consent unless the student has filed a Request for Non-Disclosure of Directory Information. LMU considers the following information to be Directory Information.
The data defined below is the ONLY INFORMATION AN AUTHORIZED LMU EMPLOYEE MAY DISCUSS WITH PARENTS, GUARDIANS AND OTHER REQUESTORS. IF THE INFORMATION BEING REQUESTED IS NOT IDENTIFIED BELOW, THEN IT IS COVERED BY FEDERAL LAW AND MAY NOT BE DISCUSSED OR GIVEN. QUESTIONS ABOUT THIS POLICY SHOULD BE DIRECTED TO THE OFFICE OF THE REGISTRAR.
- Name
- Address(es)
- Telephone numbers
- E-mail address(es)
- Date and place of birth
- Major field of study
- Enrollment status
- Participation in officially recognized activities
- Dates of attendance
- Anticipated degree and degree date
- Degrees, honors, and awards received
- Most recent educational institutions attended
- Weight and height of members of athletic teams
- Photograph
- A student’s personal identifier used by the student for purposes of accessing or communication in electronic systems
LMU Non-directory Information
This is any education record not considered to be LMU Directory Information. Non-directory Information must NOT be released to anyone, including parents of the student, without the prior written consent of the student. Further, faculty and staff may access Non-directory Information only if they have a legitimate academic need to do so. Examples of non-directory information are:
- Class rosters
- Grade reports
- CAPP Degree Audit
- Student schedule
- Transcripts
- Most disciplinary records
- Class attendance
What is Legitimate Educational Need?
Under FERPA, a school official has a legitimate educational interest if the official needs to review an education record in order to fulfill his/her university responsibilities. This includes such purposes as:
- performing appropriate tasks that are specified in his/her job description or by a contract agreement
- performing a task related to a student's education
- performing a task related to the discipline of a student
- providing services for the student or the student's family, such as health care, counseling, job placement, or financial aid
What is NOT "legitimate educational need"?
Legitimate educational interest does not convey inherent rights to access any and all student information. The law distinguishes between educational interest, and personal or private interest; educational records are not to be accessed or used for personal reasons. Educational interest does not constitute authority to disclose information to a third party without the student's written permission.
Under FERPA, under what conditions is prior consent not required to disclose information
Information may be released to the following individuals under the following circumstances:
- school officials with legitimate educational interest
- school officials at an institution where the student seeks to enroll
- parents of students who claim student as dependent for tax purposes
- health or safety emergencies that require protection of the student or others
- a court order or subpoena, after reasonable effort has been made to notify the student
- the Secretary of the Department of Education
- the Office of the Comptroller General
- the Attorney General’s Office of the United States
- state and local education authorities as part of an audit or program review
- research firms working for the educational institution
Blocking the Release of Directory Information
Should a student wish to block the release of directory information, the student must submit a Request to Prevent Disclosure of Directory Information form to the Office of the Registrar.
If a student blocks the release of academic records, the University may not confirm or deny attendance, degree completion, or any other Directory Information. Individuals with access to the official student database will see a Confidential warning displayed on the student’s record, and will immediately know that NO information may be released about that student.
Releasing Non-directory Information
Should a student wish to release Non-directory Information, the student must complete a signed and dated Authorization for Release of Student Records and submit it to the Office of the Registrar.
What can be discussed or casually mentioned?
LMU has determined that data identified in the Directory Information is considered public information and can be discussed with others UNLESS a student blocks the release of Directory Information. A student must submit the request to block the release of Directory information to the Office of the Registrar every semester. For these students, no data may be discussed.
Quick Tips on What Not To Do
- Do not publish grade data which identifies a particular student or students
- Grades should never be posted in a public place
- Never link in a public manner a student name, University ID, or Social Security Number
- Never require students to write their name and ID number on a sheet which is circulated in the classroom
- Do not circulate any information with grades in a classroom setting. It is better to distribute each paper directly to each student. Also, do not allow students to thumb through a stack of graded papers in order to find their paper
- Do not discuss the academic progress of a student with the parents of the student
- Never provide anyone with a list of students enrolled in your class
- Never provide anyone with student schedules or assist anyone other than university employees in finding a student on campus
Faculty, Staff, and Administrative Assistants may request Access to Student Records Systems.