Your longtime client calls you one evening in great distress to tell you that she just got an expulsion notice for her 13 year old son – and the hearing is in two days.  Your college age daughter calls to tell you she has been accused of cheating – and her hearing is tomorrow.   Another client is dissatisfied with her child’s special education program and wants to know what to do. What do you do if you are not an education law attorney? One of the first things you should do, in any of these situations, is to request access to and a complete copy of the student’s educational records from the school. You can do this even if you are a general practitioner with no knowledge of the substantive law.  The records will provide you with a wealth of information. What rights do you have to see those records?   Check out the FERPA statute and its regulations.

Most parents have seen notices in small print from their child’s school or college about their rights under The Family Educational Rights and Privacy Act (FERPA).  These notices may be inside a student handbook or sent in a letter from the school. These notices are provided because FERPA requires annual notification to parents and eligible students of rights under FERPA. Most parents also routinely ignore these notices. This is a mistake. Parents who like to pride themselves on their involvement in their child’s education are generally ignorant of their rights under FERPA. FERPA is the Family Educational Rights and Privacy Act of 1974 (20 U.S.C. §1232g; 34 CFR Part 99), also known as the Buckley Amendment. This law was enacted at a time when some schools denied parents access to their child’s school records and did not accord any privacy rights to students in their records. All parents and school administrators should have a basic working knowledge of this statute.


FERPA  applies to schools that receive federal funds. This includes direct funds and indirect funds through grants or loans to students in attendance. FERPA give parents certain rights regarding educational records. These rights transfer to students at age 18 or when in a postsecondary institution. FERPA provides for:

  • Access to the educational records, within 45 days
  • Privacy in the educational records, with some exceptions
  • A right to request an amendment of records and a hearing process regarding amendments
  • A right to file a complaint with the Family Policy Compliance Office of the U.S. Department of Education

Keep in mind that, while FERPA is the central federal statute about student records, there are other statutes passed which impact on confidentiality rights of students. On the federal level, there is the No Child Left Behind Act of 2001 (NCLB); the Individuals With Disabilities Education Act (IDEA); section 504 of the Rehabilitation Act of 1973; parts of the National Defense Authorization Act for Fiscal Year 2002; the Protection of Pupil Rights Amendment (PPRA), 20 U.S. C. §1232h(b). Connecticut also has its own confidentiality and access laws.

Most people think of “educational records” as just the one page transcript of grades, often called “the permanent record” by parents unfamiliar with the law. But an educational record is much more than that.  An educational record is a record that contains information that directly relates to a student that is maintained by the school. A record is broadly defined to include any information recorded in any way, which includes handwriting, print, computer media, video or audio tape, film, microfilm and microfiche.

A teacher’s hand scrawled note could be an educational record, as could a note written by a parent to a school. A teacher’s e-mail about a student to an administrator can also be an educational record. The student does not have to be identified by name – the record just has to directly relate to the student. And it doesn’t matter where the record is maintained. Education records for college students are not limited to records maintained by the registrar. Documents in a professor’s file in his office might qualify as education records. A school can’t destroy FERPA protection for a document by hiding it in a separate file.

Not every piece of paper about a student is an educational record. There are exclusions to this broad definition. Two of the most frequently encountered exceptions are “sole possession” records and law enforcement unit records. Records in the “sole possession” of school personnel are excluded. A “sole possession” record is one which is in the sole possession of the maker and which is not accessible or revealed to any other person except a substitute. A teacher’s private notes, if they have been kept private, and used as a memory aid, are not education records, and therefore, the student or parent has no right to see those notes. The common practice of “peer grading” does not violate FERPA.

Campus police records are not educational records if they are covered by the law enforcement unit exception. If records are created by the law enforcement unit for a law enforcement purpose and maintained by the unit, the student has no right of access to them under FERPA. But look for law enforcement records which are given to administrators in the school.  If the campus police gives a copy of the police report to an administrator for use in a school discipline proceeding, the record is no longer exempt. And school administrators can’t hide their discipline records by giving them to campus police, or asking the police to do all the investigation which will lead to an expulsion. Education records don’t lose their status as educational records while in the possession of the law enforcement unit. Similarly, records created by the law enforcement unit exclusively for a non-law enforcement purpose, such as a disciplinary action conducted by the school, are not covered by the law enforcement exception.

If you need the records to defend against an expulsion or for another legal proceeding, of course, access is not enough. You need a copy. Don’t rely on the few papers your client gives you – there may be many other documents in the school’s file that the parent never saw. Look at the complete records yourself or get a complete copy. FERPA does not require schools to provide copies unless denial of copies effectively prevents a student’s right to inspect and review. Some schools will provide copies as a policy, even though they are not required to do so by FERPA.  They may be state laws which entitle you to copies. IDEA requires that copies of IEPs and evaluations be provided to parents.

Parents have a right to a hearing if they claim that the information in their child’s educational records is inaccurate, misleading, or otherwise in violation of the privacy rights of the student. The parent also has the right to insert a written explanation into the record regarding the content of the record.

Who Can Look At Your File And What Can They See?

Unless an exception applies, the school may not release educational records, other than directory information, without the parent’s consent. Records are either directory information or non-directory information. Directory information includes, name, address, phone number, dates of attendance, degree awarded, enrollment status and major field of study. Directory information may be disclosed without the written consent of the student, but the student can submit a written request to the school to limit disclosure. Laws other than FERPA may authorize disclosure of personally identifiable information from students’ education records. The No Child Left Behind Act of 2001 provides that schools are required to provide directory type information to military recruiters who request it. Parents have the right to opt out of this disclosure.

Non-directory information includes all other educational records.  There is a right to confidentiality in these records.  Unless an exception applies, these records cannot be shown or released to anyone without the prior written consent of the parent or eligible student.  Even faculty and other school employees can’t always have access to these records – they must have a legitimate need to see them. There will be an access log which shows who looked at the file, although the access log need not list parents, school officials with a legitimate educational interest, people who have written consent, people seeking directory information and parties seeking the records with a subpoena when the court or issuing agency has ordered that the existence or the contents of the subpoena not be disclosed.

What if the parent has not provided written consent to disclosure of non-directory information?  Don’t assume that the records are confidential. There are over a dozen exceptions to the general rule of confidentiality. The trend in recent years has been to permit certain disclosures even without consent. Some of the most important exceptions are:

  • School officials whom the school has determined to have a legitimate educational interest
  • To a school in which the student seeks or intends to enroll
  • The Attorney General of the United States
  • To comply with a judicial order or subpoena, or litigation with the parent
  • If there’s a health or safety emergency
  • At a postsecondary institution, disclosure to the victim of a crime of violence or sex offense of the final results of the disciplinary proceeding
  • At a postsecondary institution, the final results of the disciplinary proceeding can be disclosed if the alleged perpetrator is a student and has violated the school’s rules. The name of the victim, or other students, cannot be disclosed without their consent
  • At a postsecondary institution, to the parent, if the student was under 21 and committed a disciplinary violation regarding alcohol or a controlled substance.

Under FERPA, a school is permitted to transfer all education records, including disciplinary records, of a student who is transferring to another school. NCLB changes this. NCLB, 20 U.S. C. §7165, requires that states have a procedure to transfer disciplinary records, with respect to a suspension or expulsion, by schools to any other elementary school or secondary school for any student who is enrolled or seeks to enroll in that school.

So The School Violated The Law And Released Your Records Without Your Consent, Now What Can You Do About It?

FERPA is enforced by the Family Policy Compliance Office (FPCO), which is part of the U.S. Department of Education. While there is authority allowing federal funds to be cut off if there is a violation, don’t count on this if you have a complaint of a privacy violation. The FPCO will respond to individual complaints with an investigation.  There is no right to a personal hearing. Instead, FPCO will respond to a complaint by an individual student by soliciting the written response of the school. The FPCO also provides technical assistance to schools. Ultimately, the FPCO will make a determination as to whether the school violated FERPA. Do not expect quick results. It will take many months for this investigation. A decision might well be over a year away.

If you’re not satisfied with the slow response of FPCO to your complaint, you might consider filing a lawsuit against the school based on a violation of FERPA. At one time this might have worked. But no more. The courts have shot down that approach.

In Gonzaga University v. Doe, a student brought a suit against the university for disclosing personally identifiable information, without his consent, in violation of FERPA.  The Supreme Court ruled in 2002 that students may not sue for damages under 42 U.S.C. §1983 to enforce provisions of FERPA.  While you may not have a private right of action under FERPA, you may still have a claim under state tort law for invasion of privacy. You can also sue for injunctive relief under FERPA to stop a school from releasing educational records.

Hot Issues – Campus Criminals

Parents and college students are justifiably concerned with campus crime. The Crime Awareness and Campus Security Act of 1990 requires that colleges publish and distribute an annual security report which includes campus crime statistics. Some states have their own version of a crime statistics law.  Students who want more information may turn to state freedom of information laws seeking information about public schools. College officials may be reluctant to share the details of crimes committed on campus, often asserting that FERPA requires them to protect the privacy interests of the students who are involved.

Because of a 1992 amendment to FERPA, campus law enforcement records are not education records and are exempt from FERPA protection. They may or may not be available to the public depending upon your state’s open records laws.

Victims may be informed of the final results of a disciplinary proceeding against an alleged perpetrator regardless of the outcome of that proceeding. A college may disclose, to the public, the final results of disciplinary proceedings in which a student is found to be in violation of school rules for committing a crime of violence or a nonforcible sex offense. The school cannot disclose the name of any other student, including a victim or witness, without the prior written consent of the other student. The regulations do not require this disclosure. Disclosure is permissive. Schools are free to make their own policies regarding disclosure. Counsel should also look to state law regarding other statutory disclosure provisions. Schools may disclose information concerning sex offenders that they receive under State sex offender registration and community notification programs.

Another Hot Issue – Anti-Terrorism Activities

When Congress passed the Patriot Act in response to the September 11 terrorist attacks on the United States it amended FERPA, allowing broad, non-consensual disclosure of educational records. The Attorney General may submit a written application to a court for an ex parte order requiring an educational agency to permit the AG to collect educational records that are relevant to an authorized investigation or prosecution of terrorism crimes. The Patriot Act also amends FERPA’s record keeping requirements – the school does not have to keep a record of that disclosure. An educational institution that, in good faith, produces information from education records in compliance with an ex parte order issued under the amendment shall not be liable to any person for that production.

Connecticut Provide Additional Rights

Conn. Gen. Stat. §10-15b provides that parents are entitled to access to all educational, medical records and similar records, with certain exceptions. Connecticut Reg. §10-76d-18, relating to children requiring special education, provides that each board of education shall have policies and procedures to ensure the confidentiality of education records. Parents have the right to inspect and review any education records relating to their child which are collected, maintained or used by the board of education. A request to review a child’s records shall be in writing.  The board of education shall comply with such request within ten days of such request, or within three days if the request is in order to prepare for a PPT or due process hearing. A parent is entitled to one free copy. The board must comply with that request within five school days of receipt of the request.  This is an exception to this:  a recent amendment to this regulation provides that any test instrument for which the test manufacturer asserts a proprietary or copyright interest shall not be copied. Under a recent statutory amendment, noncustodial parents must be provided with all school notices that are provided to the custodial parent.

More stringent confidentiality provisions are in effect for HIV information. Confidential HIV information may not be released to any person (including teachers) other than a health care provider without a written release.   By contrast, communications concerning drug or alcohol abuse made in confidence by a student to a teacher or other school professional may be disclosed by the professional employee. The professional is immune from liability for a good faith decision to disclose or not to disclose this information.

A Practical tip

FERPA provides parents with a valuable right of access to their child’s records. Whenever parents have a dispute with school – whether involving a discipline matter, academic misconduct, or special education dispute, the first step is to view the child’s school records. Whenever a dispute arises, counsel for the parents should make a written request for access to and/or a complete copy of the child’s educational records, and also request a copy of the school’s FERPA policy.

The flip side of FERPA is that, even though we have a federal statute protecting privacy in school records, don’t assume that a child’s educational records are truly private. There are lots of exceptions built into the law.


Winona W. Zimberlin


Winona W. Zimberlin practices law in Hartford, representing students in disputes with schools and colleges, and representing people seeking social security, LTD and veterans disability benefits. She is chair of the Education Law Committee of the Connecticut Bar Association.

Contact Us

We're not around right now. But you can send us an email and we'll get back to you, asap.

Not readable? Change text. captcha txt

Start typing and press Enter to search