the FamiLY eduCAtionAL rights
and PRIVacy act of 1974
- ferpa is an acronym for the Family Educational Rights & privacy Act of 1974, as amended.
- this law protects the privacy of student educational records and gives students the right to refuse to permit any educational institution, including iowa lakes, from releasing or disclosing any information about them.
- the purpose of ferpa is to identify the student rights pertaining to their educational records. those rights include:
- the right to inspect and review their educational records
- the right to have their records amended
- the right to control the disclosure of information from their records
- ferpa sets forth requirements regarding the privacy of student educational records and limits the release of personally identifiable information.
- ferpa governs release of these records maintained by an educational institution and access to these records.
- coverage under this act begins upon enrollment. it also protects former students and student records from other institutions.
- high school students enrolled in a college class are considered college students and fall under ferpa guidelines.
- parents and/or legal guardians cannot be given any information regarding classroom performance or grades unless there is a signed consent form on file in the registrar’s office.
- compliance with ferpa regulations allows iowa lakes to offer title iv funding (federal financial aid) to students
what is an "educational record?"
an “educational record” is any record maintained by the institution or its affiliates which is related to the student, including, but not limited to the following:
- academic records, regardless of their location
- advising records
- class notes and grades
- instructor records
- financial aid information and account records
- e-mails containing personally identifiable information about the student
- all media including, but not limited to electronic data, video and audiotape
- letters to, from, or about students
- grade books –
- records kept by an affiliate of the institution, such as work experience or clinical notes etc. kept by the entity where the student is learning
- student conduct records
- disability records
- notes in any student information system or hand written and shared with others
- aggregate data that is grouped in such a way that someone could discern the identity of a student
- any written document, whether formal or informal that contains personally identifiable information about a student that is shared with another individual or individuals, becomes an educational record
- records that are publicly available elsewhere
- information that the student has publicly revealed
an educational record does not include:
- information that is not “recorded” – that is personal knowledge.
- records or notes in the sole possession of the maker that are not accessible or revealed to any other person
- information not shared or accessible; kept by a single person as a “memory jogger.” for example, the private notes an instructor may keep during the course of a semester for consultation when it comes time to set final grades
- grades on peer-graded papers until collected and recorded
- employment records that have no relationship to student status
- law enforcement records
- admission records, unless or until the prospect becomes an active student
information: confidential or directory:
- “directory information,” can be released without the student's written permission, unless the student opts to consider directory information "confidential “
when the student elect’s privacy of their directory information, do not release information about the student
- “confidential information” can only be released with the written consent of the student
directory information at iowa lakes:
this information is considered directory information or public information and may be released unless specifically restricted by action of the student. it is best practice to refer any inquiry about student information to the records office.
date of birth (and yet this is now under greater scrutiny)
major field of study
participation in officially recognized activities and sports
Weight/height (athletics only)
dates of attendance
degrees and awards
Full-time/part- time status
previous schools attended
you can reference student handbook or webpages for this information.
confidential information can only be released with the written consent of the student.
examples of confidential information:
- social security number
- current class schedule
- grade point average (gpa)
- academic standing
- test scores
- enrollment verification for financial aid/health or car insurance
- good student discount certification forms
third party inquiries
- forward all third party inquiries regarding a student to the registrar’s office
- direct requests for lists of directory information to the registrar.
- written consent from the student must be submitted to the registrar’s office to disclose student record information to a third party. this includes, but is not limited to:
- release of information to parents/legal guardians and spouses
- prospective employers
students have the right to inspect and review information contained in their educational records. the student must make a written request to the director of records and registration.
health and safety emergencies
institutions may release information from education records, without consent, in connection with an “articulable and significant threat to the health or safety of a student or other individuals”
disclosure may be made only to “appropriate parties” and must be limited to “information [that] is necessary to protect the health or safety of the student or other individuals”
Verification of student’s identification/e-mail contact
- if e-mailing, ensure email address being used matches the e-mail address listed in student’s record
- if email does not match, respond that you are only able to fulfill their request to the official email address on file
posting/emailing student information
never post or e-mail confidential student information to anyone but that student.
this includes, but is not limited to:
- feedback on assignments
- academic/course progress
- do not release grade information or performance in a class, including, but not limited to, feedback on assignments or tests, clinical experiences, critiques of papers, and coop work experiences over the phone.
- if a third party calls and provides the students’ ssn in an attempt to obtain directory information, the requested information cannot be disclosed at that time. it is suggested that you ask that the request for information be faxed or mailed to the registrar’s office.
please adhere to the following:
- lock your computer and/or log out when you walk away from your computer, whether on campus, at home, or in any other venue.
- if you use a thumb drive–remove from your computer if it contains private student information
- carefully protect access to your passwords
- carefully log out of any publicly accessible computer and ensure that you have not saved any passwords or data on the hard drive
your access to records
ferpa permits college officials access and use of student records for legitimate educational purposes.
“legitimate educational purpose” is defined as a college official’s need to know in order to perform a job related task, an instructional task, a service or benefit for the student.
- service or benefit such as counseling, student financial aid, or student job placement, etc.
as an employee of iowa lakes, you have access to student records on a “need to know” basis. accessing or using student information for other than legitimate educational purposes is strictly prohibited. their confidentiality, use, and release are governed by ferpa. you have a responsibility to protect all education records in your possession or that you come in contact with during the course of your job.
violation of ferpa is serious
it can lead to:
- possible prosecution under criminal codes
- dismissal or termination
- loss of federal funding to the institution
if you have questions about what is permitted under the act, contact the registrar.