Family Educational Rights and Privacy Act (FERPA)

The Family Educational Rights and Privacy Act (FERPA) is a federal law passed in 1974 to help ensure that educational records are kept private while guaranteeing access to the records for students and their parents. All schools, colleges, universities and educational institutions and agencies that receive funding from the U.S. Department of Education must comply with FERPA regulations.

Read the full text of FERPA.


  • Institutions may not disclose information from a student’s education records without the student’s written consent, with some exceptions.
  • Students who are or have been “in attendance” at an institution, either in person or by correspondence, are protected by FERPA.
  • Students who applied to but did not attend an institution and deceased students are not protected by FERPA guidelines.

Compliance Requirements

Under FERPA, all schools and educational agencies must:

  1. Review and inspect education records within 45 days of a request.
  2. Obtain student or parent consent to the disclosure of personally identifiable information from education records.
  3. Amend education records that are believed to be inaccurate.
  4. Notify parents and eligible students annually of their FERPA rights.
  5. Comply with FERPA recording and disclosure provisions.

Violation Penalties

Schools and educational agencies found to be in violation of FERPA face the possibility of stiff penalties, including:

  • Dismissal or termination of responsible officials from their jobs.
  • Loss of federal funding to the institution, including federal financial aid.
  • Possible criminal prosecution, including jail time.

See why Lewis and Clark College chose to outsource cybersecurity services to Proficio.

Watch Video