Do's & Don'ts of FERPA

DO

Understand the difference between directory and non-directory information.

DON'T

Make non-directory or non-public directory information available to the public.

Non-public directory information includes grade information, class rosters, NUIDs, SSN, and student email addresses.

DO

Know students can grant written consent through MyRED.

DON'T

Give non-directory information out without student written consent (unless there is legitimate educational interest).

A university official has a legitimate educational interest if they need to review an educational record in order to fulfill their professional responsibilities for the university.

DO

Check for a FERPA restriction before communicating directory information.

DON'T

Give any information out about a student, either directory or non-directory, if that student has a FERPA restriction.

DO

Understand parents can receive non-directory information in cases of emergencies.

A situation where releasing student information to appropriate parties is deemed necessary to protect the health or safety of the student or other individuals.

DON'T

Share non-directory or non-public directory information with parents without written consent.

DO

Know students have the right to inspect their educational record.

DON'T

Leave student information in public areas, including on fax machines, copiers, etc.

DO

Use blind carbon copy (bcc) when electronically communicating with multiple students.

DON'T

Use carbon copy (cc) when electronically communicating with multiple students.