Welcome to the new AACRAO website. While the site is live, development is ongoing, visitors can expect updates and new features in the weeks ahead.

Mobile Nav
Log in
Join
Get Involved

The Family Educational Rights and Privacy Act of 1974 (FERPA) is a federal law that pertains to the release of and access to student educational records. The law, which seeks to protect the rights of students and to ensure the privacy and accuracy of education records, applies to all schools that receive funds under applicable programs administered by the U.S. Department of Education.

Visit the Department’s website to learn more.

Regulations and Recent Guidance

U.S. Department of Education updates timeline for FERPA regulatory changes. In this audit report, the Department states that the expected FERPA changes are more likely to be released in March 2027 rather than the previous timeline of October 2024.

The Family Educational Rights and Privacy Act of 1974 as Amended (February 2010)

AACRAO’s Guidance regarding FERPA Electronic Record Keeping

AACRAO’s Guidance regarding Correcting Certain Provisions Created by 2012 Regulations

Family Educational Rights and Privacy Final Rules (December 2011)

FPCO’s Guidance on FERPA and the Disclosure of Student Information Related to Emergencies and Disasters (June 2010)

FPCO’s Dear Colleague Letter on the 2010 Census (September 2009)

Legislative History of Major FERPA Provisions (February 2004)

In light of the December 2011 FERPA changes, AACRAO contracted with a prominent D.C. law firm to produce additional language for institutions to use as part of their annual FERPA Notice. The association recommends the FERPA Addendum Notice as a compliance addition to institutional privacy disclosures.

Model Contract – Institution/Vendor Agreement for Outsourced Educational Activity Services

Congressional Research Service resource on The Family Educational Rights and Privacy Act (FERPA): A Legal Overview

U.S. Department of Education resource on Integrated Data Systems and Student Privacy

U.S. Department of Education and U.S. Department of Health and Human Services resource on Joint Guidance on the Application of FERPA and HIPAA

FERPA FAQs

See all FERPA FAQs

  • How does the Gramm-Leach-Bliley Act relate to FERPA?

    All higher education institutions that participate in the Federal Student Aid program must comply with the Gramm-Leach-Bliley Act and report this compliance in their annual audit. Higher education institutions are deemed to be in compliance with the Gramm-Leach-Bliley Act Privacy Rule if they are in compliance with the Family Educational Rights and Privacy Act (FERPA). For more information regarding how the Gramm-Leach-Bliley Act impacts higher education institutions visit this EDUCAUSE Resource Page or this Resource Page from the Office of Federal Student Aid.

  • What is directory information?

    Under FERPA, some information included in a student’s education record is defined as directory information. Institutions may disclose that information without violating the law if it has specifically designated that information as “directory information.” Directory information may include: name; address; telephone number; major field of study; dates of attendance; current enrollment status (full-time/part-time); class standing; receipt or non-receipt of a degree; academic awards received

  • What information is not considered part of an education record?

    Sole possession records or private notes of individual staff or faculty that are not accessible or released to other personnel; law enforcement or campus security records; employee records (unless contingent upon attendance); medical records; alumni records.

  • What is an education record?

    An education record is any record which contains information that is personally identifiable to a student, and is maintained by the university or by a party or organization acting on behalf of the school. Education records may include: written and printed documents; electronic media; magnetic tape (microfilm and microfiche); film; diskette or CDs; video or audio tapes. This includes transcripts or other records obtained from a school in which a student was previously enrolled.

  • What are a student’s rights under FERPA?

    • The right to inspect and review their education records.
    • The right to seek to amend education records that are believed to be inaccurate of misleading.
    • The right to demand that personally identifiable information be disclosed only with student consent, except to the extent that FERPA authorizes disclosure without consent.
    • The right to file a complaint against the institution

  • If using e-response and race/ethnicity and gender information is not included, will the information be considered complete for upload?

    The information will be considered complete if you provide complete “directory information.” Information required to help with non-duplication include Name, DOB or Age, Address of usual home elsewhere (where they live while not at campus housing). The more complete the information, e.g. legal first and last names or complete DOB (month, day, and year), the more confident Census can be that two records that are linked together are the same person.