Yes, a lawyer can subpoena school records, but the Family Educational Rights and Privacy Act sharply limits how a school can respond. FERPA generally forbids schools that receive federal funding from releasing a student’s education records without written consent, and the law’s subpoena exception requires the school to make a reasonable effort to notify you before it hands anything over. That notice is your opening to challenge the subpoena in court.
Which Records a Subpoena Can Reach
FERPA protects “education records,” defined broadly as records directly related to a student and maintained by the school or someone acting for it.1eCFR. 34 CFR 99.3 – What Definitions Apply to These Regulations That covers transcripts, attendance logs, disciplinary reports, standardized test scores, IEPs and other special education documents, and immunization records held by the school.
Several categories fall outside the definition and don’t carry FERPA’s consent and notice protections:
- Sole-possession notes a teacher or counselor keeps privately as a memory aid, so long as no one else sees them.
- Records created and kept by a school’s law enforcement unit for law enforcement purposes.
- Employment records tied to a school job that isn’t dependent on student status.
- Treatment records for students 18 or older made by a doctor, psychologist, or similar professional and used only for treatment.
- Records created after the person is no longer a student and unrelated to their time as one.
The line matters. A subpoena directed at a campus police unit’s records, for instance, may not trigger FERPA’s process at all because those files aren’t education records.1eCFR. 34 CFR 99.3 – What Definitions Apply to These Regulations
The Notice You Should Receive
The subpoena exception lives at 34 CFR § 99.31(a)(9). It allows a school to disclose education records without consent when it is complying with a lawfully issued subpoena or judicial order, but only after making a reasonable effort to notify the parent or eligible student in advance so the family can seek protective action.2eCFR. 34 CFR 99.31 – Under What Conditions Is Prior Consent Not Required to Disclose Information FERPA doesn’t set a specific number of days, but a school cannot receive a subpoena one day and ship the file the next without giving you a meaningful chance to respond.
Who gets the notice depends on the student’s status. An “eligible student” is one who has turned 18 or is enrolled in a postsecondary institution at any age, and once a student becomes eligible, the FERPA rights transfer from the parent to the student.3U.S. Department of Education. Who Is an Eligible Student A subpoena aimed at college records goes on notice to the student, not the parent.
When the Notice Never Comes
Three situations let a school comply without telling you the subpoena exists:
- A federal grand jury subpoena when the court has ordered that its existence or contents be kept secret.
- Any subpoena issued for a law enforcement purpose when the issuing court or agency has ordered secrecy about the subpoena or the information produced.
- An ex parte court order obtained by the U.S. Attorney General, or a designee at the Assistant Attorney General level or higher, for investigations of terrorism offenses.
In each of these, the school is legally barred from telling the family the subpoena exists.2eCFR. 34 CFR 99.31 – Under What Conditions Is Prior Consent Not Required to Disclose Information The exceptions are narrow because they apply only where a court has specifically ordered secrecy, but they explain the one scenario where records can lawfully leave the school without your knowledge.
How to Challenge the Subpoena
Once you get notice, you have two main tools. A motion to quash asks the court to cancel the subpoena outright. A motion for a protective order asks the court to narrow what gets produced or restrict how the requesting side can use it.
Timing is short. In federal court, written objections must be served on the requesting attorney by the earlier of the subpoena’s compliance date or 14 days after service. Once objections are on file, the school is excused from producing anything unless a judge orders it to. State court deadlines vary but tend to follow the same pattern of a brief window before the compliance date.
Grounds That Tend to Work
The strongest arguments against a school records subpoena usually sort into a few categories:
- Relevance. The records have no meaningful connection to the dispute. A demand for a full academic history in a minor car-accident case is hard to justify.
- Overbreadth. The subpoena reaches far beyond what the case needs. A request tied to missed school days after an injury doesn’t require ten years of IEP files.
- Undue burden. Compliance would impose unreasonable cost or difficulty on the school.
- Privacy and privilege. The records include sensitive material, such as mental health notes, whose disclosure would cause harm outweighing the requesting side’s need.
In Camera Review
When the fight is over specific documents, a judge can conduct an in camera review, reading the disputed records privately without either side seeing them, then ruling document by document on what gets produced. Sensitive records cases often turn on this step. The party resisting disclosure generally needs to prepare a privilege log identifying each withheld document and explaining why it should stay out.
Two Things a Subpoena Isn’t Needed For
Not every request for student information requires a subpoena. FERPA lets schools designate categories as “directory information” and release them without consent. These usually include the student’s name, address, phone number, date and place of birth, participation in activities and sports, and dates of attendance. Schools must first give families public notice of what they treat as directory information and a chance to opt out, and they must honor a written request to restrict disclosure.4U.S. Department of Education. Directory Information Basic identifying details may be available to a lawyer directly, unless the family has opted out.
School health records are the other place where assumptions go wrong. Records kept by a school nurse, campus health clinic, or school counselor are education records under FERPA, not HIPAA. The HIPAA Privacy Rule specifically excludes records that qualify as FERPA education records, even where the school otherwise looks like a HIPAA-covered entity.5HHS.gov. Does FERPA or HIPAA Apply to Records on Students at Health Clinics A subpoena for school health records runs through FERPA’s process, and any challenge is framed under FERPA, not HIPAA. The narrow exception is treatment records for students 18 or older kept by a physician or psychologist solely for treatment and not shared further, which are excluded from the education records definition entirely.1eCFR. 34 CFR 99.3 – What Definitions Apply to These Regulations
If the School Releases Records Anyway
If a school hands over education records without following FERPA, whether by skipping consent, treating an invalid subpoena as valid, or failing to make a reasonable effort to notify you, the consequences run against the school, not the lawyer who asked. FERPA is enforced through the threat of losing federal funding. The U.S. Department of Education investigates complaints and, in theory, can cut off federal dollars.
A parent or eligible student can file a written complaint with the Department’s Student Privacy Policy Office. The complaint must describe the alleged violation with specific facts and must be filed within 180 days of the violation or within 180 days of when the family learned about it.6U.S. Department of Education. File a Complaint
One limit catches many families by surprise. FERPA gives no private right of action. The U.S. Supreme Court held in Gonzaga University v. Doe (2002) that individuals cannot sue a school for damages under FERPA.7Congress.gov. The Family Educational Rights and Privacy Act (FERPA) – Legal Issues The administrative complaint to the Student Privacy Policy Office is the sole federal remedy. Some state student privacy laws add their own remedies, but at the federal level, that complaint is the only path.