FERPA: Education Records, Access, and Disclosure

FERPA gives parents — and students themselves once they turn 18 or begin attending a postsecondary institution — three rights over the school's records about the student: to inspect and review them, to ask that inaccurate or misleading entries be amended, and to consent before most disclosures of personally identifiable information. The statute is 20 U.S.C. 1232g, and it reaches every school receiving Department of Education funds. What it does not give is a lawsuit: in Gonzaga University v. Doe (2002), the Supreme Court held that FERPA creates no private right of action, so the remedy is a complaint to the Department rather than a claim in court.

1.What is a record, and what is not

The definition is wide in one direction and narrow in another. Wide first: if a document identifies a particular student and the school keeps it, format is irrelevant. Grades, attendance, discipline files, evaluations, health forms held by the school, and correspondence about the student all qualify.

The narrowing comes from a short list of carve-outs. A personal memory aid kept by one staff member and shared with nobody except a temporary substitute is a sole possession note, outside the statute — but it loses that status the moment it is passed to another employee or filed centrally. Records created by a school's own law enforcement unit for a law enforcement purpose are excluded, though the same information in a dean's file is not.

Also outside the statute: employment records of a worker who is not a student, treatment records made by a physician or psychologist for an eligible student and used only for treatment, and records created after a person stops being a student. In Owasso Independent School District v. Falvo (2002), the Supreme Court held that papers scored by classmates before the teacher collects them are not yet education records.

2.Who holds the right, and when it moves

Until the student turns 18 or enrolls at a postsecondary institution, the rights belong to the parents. Both parents normally have access, including a parent who does not have physical custody, unless a court order, state statute, or binding legal document specifically removes that right. A school that wants to refuse a parent needs the document, not a report of what a decree says.

On the eighteenth birthday, or on the day the student begins attending college — whichever comes first — the rights transfer to the student, who becomes an eligible student. A high school student taking dual-enrollment courses becomes an eligible student as to the college's records while the parents keep rights over the high school file. The same shift explains why accommodations in higher education depend on the student stepping forward personally.

3.Inspection, copies, and correction

A school must comply with a request to inspect and review within a reasonable period and in no case more than 45 days. It need not hand over copies unless the circumstances — distance, disability, a records hold — would effectively prevent inspection. It may charge for copies but not a fee that in practice blocks access, and it may not charge for searching for or retrieving the file.

Where a record contains information about more than one student, the right runs only to the portion about the requester's own child, and the school redacts the rest. This is the usual reason a discipline report arrives with names blacked out.

The amendment right works in two stages. The parent or eligible student asks the school to correct a record believed inaccurate, misleading, or in violation of privacy rights. If the school refuses, it must say so and inform the requester of the right to a hearing, conducted by an official without a direct interest in the outcome and decided in writing. If that goes against the request, the parent or student may place a statement in the record, and it must be kept with the disputed part and released whenever it is.

Caution: Amendment corrects records that are inaccurate, misleading, or privacy-violating. It is not a route to relitigate a grade the student earned or the merits of a removal decision, which run through the academic appeal route or the process described in school discipline and due process.

4.Releasing records without consent

The default is written consent that specifies the records, the purpose, and the recipient. The exceptions are numerous, and every one of them is permissive: FERPA allows the school to disclose, it does not require it. State law or district policy may still forbid a release the federal statute would tolerate.

Two deserve emphasis. The subpoena exception is not self-executing: the ordinary rule is advance notice to the family so they can seek protective action, with narrow carve-outs for grand jury and certain law enforcement subpoenas. And directory information is only directory information if the school defined it and published the opt-out; a district that never gave notice cannot rely on the exception afterward.

Special education files sit under a second layer. The confidentiality provisions accompanying the federal special education statute, described at the Department's IDEA site, add their own consent, destruction, and access rules on top of FERPA. Those rules matter most while an individualized education program is being written or disputed.

5.Enforcement, and what it reaches

Because there is no private cause of action, enforcement runs through the Department of Education's student privacy office. A complaint must be filed within 180 days of the violation, or of when the complainant knew or should have known of it, with an extension available for good cause. The office may investigate, seek a written response, and press for voluntary compliance.

The statutory sanction is withdrawal of federal funding — a blunt instrument that has not been the practical outcome. What a successful complaint usually produces is a corrected practice, a revised annual notice, or staff training. FERPA does not authorize damages and will not order a record expunged. Current complaint procedures are published on the Department's FERPA guidance pages.

FERPA is a federal floor, not the whole of the law. As of mid-2026, many states have student data privacy statutes restricting what educational technology vendors may do with student information, and those go further than FERPA in places. State open-records law decides whether school documents that are not education records must be released publicly. Separate state statutes govern school-based health records, sometimes giving an adolescent control the parent does not have, and state juvenile records law governs the law enforcement unit files FERPA leaves alone. The federal framework comes from the Department of Education, but the operative rule in a dispute is often the state one.

6.Questions this raises

Can a parent see the part of a record that names another student?

No. The right runs to information about the requester's own child. Where a document mixes students — an incident report, a bus referral, a class roster with grades — the school must let the parent inspect the portion relating to their child and may redact the rest. A parent who suspects the redaction is hiding relevant material can ask for a written explanation of what was withheld and why.

Is a teacher's email about a student an education record?

Often yes. If the message identifies the student and the school maintains it, format is irrelevant, and district mail systems are maintained by the school. The sole possession exception is narrow: it protects a private memory aid held by one person and shared with nobody. An email, by definition, has been sent to someone, so it rarely qualifies. Retention schedules, not FERPA, usually determine whether the message still exists.

Can the amendment right be used to change a grade?

Only to correct a recording error. If the transcript shows a grade the teacher did not assign, that is an inaccurate record and amendment is the right tool. If the argument is that the grade was unfair or too harsh, that is a substantive academic judgment, and both the Department and the courts have declined to turn the FERPA hearing into an appeal of it. Use the institution's grade appeal procedure instead.

7.Asking to see the file

Put the request in writing to the records custodian or registrar, ask for the complete education record rather than a named document, and say whether inspection or copies are wanted. Keep the date, because the 45-day clock runs from the request. Ask separately for the annual FERPA notice and the list of directory information categories, since both define what the district can already release.

On receipt, read for entries that are wrong rather than entries that are unwelcome. Send an amendment request that identifies the specific line, states why it is inaccurate or misleading, and asks for the hearing if the request is refused. If a disclosure has already occurred and appears improper, the complaint to the Department is the available remedy, and it is time-limited — so document what was released, to whom, and when.