Family Educational Rights and Privacy Act (FERPA) Guide
Many faculty and staff have access to student information that is private and protected by federal laws, specifically the Family Educational Rights and Privacy Act, known by the acronym FERPA.
This page provides a basic guide as to how PC employees should handle student information in a manner that is consistent with FERPA. Please see below for some helpful resources.
- FERPA 101 (downloadable PDF)
- FERPA FAQ
- Common Scenarios (Test your knowledge!)
- Providence College FERPA Policy
Frequently Asked Questions
What is FERPA?
The Family Educational Rights and Privacy Act (FERPA) of 1974 is a federal law that protects the privacy of student educational records. Essentially, FERPA protects student information from being released without students’ permission. The rights provided by this act transfer from the parent to the student when the student reaches the age of 18 OR attends a postsecondary school — whichever comes first.
Under this law, students have the following rights with regard to their educational records:
- To inspect and review their education records
- To request an amendment to their education records when they believe the records are inaccurate or misleading
- To consent to disclosures of personally identifiable information contained in their education records, except to the extent that FERPA authorizes disclosure without consent
- To file a complaint with the United States Department of Education concerning alleged failures by the College to comply with FERPA
Who must comply with FERPA?
The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.
Faculty, staff, graduate assistants, and any other member of the Providence College community with access to student records are required to comply with all FERPA regulations. Failure to comply could result in a loss of federal funding.
Am I able to access FERPA protected information (ie. education records)?
You are accessing and working with FERPA protected data if you have a job function such as:
- Leading or supporting course instruction
- Reporting for student related compliance or decision making
- Assisting with student success or well-being
- Working with students on financial aid or billing
- Providing services to students
- Marketing and communications
And/or if you have access to systems such as:
- Canvas
- Banner
- ARC, AIR, or other academic reporting tools
- Slate, or other admission tools
- Degree Works, Advising Gateway, or other advising systems
- Unit specific systems that include student data
What is an education record?
An education record is any record that is directly related to a student that is maintained by the College or by a party acting on behalf of the College. This includes information recorded in any medium such as handwriting, computer media, video or audio tape, film, microfilm and microfiche.
What is NOT considered an education record?
- Sole possession records* or private notes held by a school official that are not accessible or released to other personnel, except individuals serving as a temporary substitute for the school official;
- Campus security or law enforcement records that are held by a school official that are not accessible by or released to other personnel except in emergency situations;
- Records relating to individuals who are employed by the institution, unless the employment is contingent on their status as a student (e.g., work-study students).
- Records of an institution that contain information about an individual obtained only after that person is no longer a student at that institution (e.g., alumni records).
*Please note: if a sole possession record is shared with any other college official, it then becomes a part of the student’s record and is then considered an education record protected by FERPA.
In what cases does FERPA allow for the disclosure of information without student permission/consent?
FERPA allows for disclosures…
- To school officials who have been determined to have legitimate educational interest in order to fulfill their professional responsibility.
- To officials of another institution in which a student seeks or intends to enroll.
- To state or local educational authorities auditing or evaluating Federal or State supported education programs or enforcing Federal laws which relate to those programs.
- If the disclosure is pursuant to a lawfully issued court order or subpoena.
- If the disclosure is made for compliance with the Solomon Amendment.
- If the disclosure is to a parent who legally declares the student as a dependent.
- If the disclosure is to parents and legal guardians of students under the age of 21, regardless of their dependency status, of information regarding a student’s violation of laws or policies governing the use or possession of alcohol or a controlled substance.
- If the disclosure is made in situations deemed by the college as a health/safety emergency.
- If the disclosure is provided to organizations conducting studies to improve instruction, or to accrediting organizations.
- If the disclosure is made in connection with the receipt of financial aid (validating eligibility).
- If the information disclosed has been designated as directory information by the college.
What is directory information?
At its discretion, the College may disclose “directory information” in accordance with the provisions of FERPA. Directory information is defined as that information which would not generally be considered harmful or an invasion of privacy if disclosed.
Designated directory information includes the following:
- Student’s name
- Address (local and permanent)
- Phone number (local and permanent)
- College email address
- Date and place of birth
- Major field of study
- Class year
- Participation in officially recognized activities and sports
- Height/weight of members of athletic teams
- Enrollment status
- Dates of attendance
- Degrees, honors, and awards received
- Photographs
- Previous education institutions attended
Students may prohibit the release of directory information by contacting the Registrar’s Office in writing.
How do I check to see if a parent/guardian has been granted access to FERPA-protected (non-directory) information?
While students can request confidentiality to withhold their information from directory requests, students can also grant FERPA access to their academic and/or financial information to specified individuals, such as their parents or legal guardians. Students can elect this option on CyberFriar and determine exactly what information they will allow to be shared.
As a faculty member, assigned advisor, department chair, administrative assistant, etc., you can check a student’s Cyberfriar Advising Gateway profile to see if they have granted such access.
Select “FERPA Authorizations” from the side menu of the student’s profile. Here you will be able to view the names of the individuals to which the student has granted access, as well as the type(s) of information they are allowed to view/discuss (academic information only = AI, financial information only = FI, or both = ALL).
FERPA Best Practices
When accessing student data, be sure that you:
- Use student information only for the purpose of performing your required duties.
- Understand the difference between directory and non-directory information.
- Check for any FERPA restrictions that a student may have requested.
- Keep any materials that contain protected student information out of view and access to others that do not have a legitimate educational interest.
- Double-check any information you may need to share with others to ensure that only the information requested is being provided.
- Include [PC-Encrypt] in the subject line if you need to share something via email that includes protected student information (i.e. SSNs, full student ID numbers, etc.).
- Pass along any requests for student information from outside agencies to the Office of the Registrar.
- Allow students to inspect their educational records if requested.
- Lock your computer using a password-protected screen saver before stepping away from your desk.
- DO NOT provide non-directory information without written consent from the student.
- DO NOT release information about a student by phone or email without first confirming the identity of the recipient.
- DO NOT leave student information in any public spaces, such as copiers or shared printers.
- DO NOT use carbon copy (cc) when emailing multiple students.
- DO NOT leave your computer unattended while signed on.
- DO NOT dispose of student records in ordinary trash.
Who should I contact if I have questions regarding FERPA?
Individuals having questions regarding FERPA may contact Assistant Registrars Stefanie Calderon or Vanessa Sullivan, or stop by the Office of the Registrar located in Harkins 310.
Common Scenarios
1. A parent calls and wants to know their student’s class schedule. Can you share this?
NO. A student’s class schedule cannot be shared with their parent without written consent allowing them to have access to their educational record. However, if the student is claimed as a dependent on their parent’s most recent tax forms, educational information may be shared. A tax return validating that information must be shared with the Registrar before releasing any information if the student has not already provided consent.
2. You receive an email from someone stating they are performing a background check on a student. They are requesting information regarding their major, degree, grades, and GPA. Can you give out this information?
NO. Without written consent from the student, you cannot relay any information from their educational record including grades or GPA. However, directory information, such as major, degree, or dates of attendance, can be disclosed as long as the student does not have a FERPA block on their record.
PLEASE NOTE: Requests like these typically must be received in writing and should be referred to the Office of the Registrar.
3. You receive a call from the local police department. They are in the middle of an investigation and must determine if a particular student was scheduled for a class at a specific day and time. Can you share the student’s schedule?
NO. This information cannot be shared without a subpoena or court order. Requests like these should be forwarded to the Office of the Registrar, along with any supporting documentation.
4. A faculty member has recently graded a test and posted all grades on a single sheet to be passed around the class so students can see their scores. Student names are not on the sheet, only ID numbers with the corresponding grade. Is this a FERPA violation?
YES. Under FERPA, student ID numbers and grades are not considered directory information and cannot be freely shared with those that do not have a legitimate educational interest. It does not matter that the student names are not on the list, this is still considered a violation.
5. You receive a frantic phone call from an individual who says that he is a student’s father and must get in touch with them immediately because of a family emergency. Can you tell him when and where the student’s next class is?
NO. You may offer to send the student a message and ask that they contact their parents, but you cannot share any part of the student’s class schedule.
6. Your office is contacted by an alum with a successful business who is a strong supporter of the school. They ask for a list of the student names, emails, and phone numbers of the top 5% of your graduating class so they can be contacted about possible employment. This appears to be a great opportunity for upcoming graduates – can you share this information?
NO. Because this information is directly related to GPA and class rank, you cannot release it without prior consent from the students.
However, degrees and awards received are considered directory information, so names and contact information of those that have won awards may be able to be released as long as students have not made a formal request to withhold directory information.
7. A parent emails a faculty member asking how their student is doing in their class. Can the faculty share this information?
NO. Unless the student has given written consent allowing their parent access to their academic records, faculty cannot discuss specifics of any student’s situation within their class. Faculty can however discuss grading philosophy in general terms, as presented in the course syllabus.
Faculty, assigned advisors, and department chairs should check a student’s FERPA permissions on CyberFriar prior to communicating with parents/guardians.
Office of the Registrar
1 Cunningham Square,
Providence, RI 02918, USA,
Harkins Hall 310
401-865-1033
401-865-1899
Hours: Monday through Friday, 8:30 AM to 4:30 PM.
During the Summer, Providence College Offices Close at 12:00 PM on Fridays.
Inquiries about transcripts, enrollment verifications, and grades: records@providence.edu
Inquiries about course registration and scheduling of classroom space: scheduling@providence.edu