FERPA: Inspecting Education Records, the 45-Day Rule, and Corrections

Under the Family Educational Rights and Privacy Act, the right to inspect education records belongs to parents of K–12 students and to students who are at least 18 or enrolled in college. A school that receives U.S. Department of Education funding must let you review the records within 45 days of a written request and cannot charge you for the search or retrieval.1Office of the Law Revision Counsel. 20 USC 1232g – Family Educational and Privacy Rights The process is straightforward when you know what to ask for and how the deadline works.

Who Can Make the Request

Parents hold the FERPA right while their child is in K–12. That right transfers to the student when the student turns 18 or enrolls in any postsecondary program, at which point the student becomes an “eligible student” and the parent no longer has automatic access.2Protecting Student Privacy. To Which Educational Agencies or Institutions Does FERPA Apply

There is one workaround for parents of college students. A postsecondary school may share records with a parent without the student’s consent if the student is claimed as a dependent for federal tax purposes.3Protecting Student Privacy. Must Postsecondary Institutions Provide a Parent With Access to an Eligible Student’s Education Records The school has the option, not the obligation. Most colleges will ask for a copy of the parent’s most recent tax return showing the student as a dependent before releasing anything.

What Records You Can Ask to See

An education record is any document that is directly related to a student and maintained by the school or someone acting for the school.4eCFR. 34 CFR 99.3 – What Definitions Apply to These Regulations Format is irrelevant. Paper files, digital databases, emails, and spreadsheets all count if they meet both parts of that test.

Common examples include transcripts, grade reports, attendance logs, disciplinary files, standardized test scores, enrollment records, and personal information stored in school databases. At the college level, financial aid records are part of the protected set.

Security Camera Footage and Digital Data

Surveillance video becomes an education record when the school uses it in a way directly related to a particular student. Footage that captures a disciplinary incident, a physical altercation, or a student’s injury generally qualifies. Background footage where a student happens to walk through the frame generally does not.5Protecting Student Privacy. When Is a Photo or Video of a Student an Education Record Under FERPA

Digital data from online learning platforms — login records, time-on-task logs, activity data — follows the same two-part test. When it is linked to a specific student’s personally identifiable information, it is part of the record. Stripped of identifiers, it falls outside FERPA’s reach.6U.S. Department of Education Privacy Technical Assistance Center. Protecting Student Privacy While Using Online Educational Services

Records That Mention Other Students

If a document in your child’s file also contains information about other students, you can only see the portion that relates to your child. The school must redact or separate the other students’ information when it can reasonably do so.7Protecting Student Privacy. If Redaction or Segregation of an Education Record of Multiple Students Can Be Reasonably Accomplished This comes up with incident reports that name several students and with classroom observation notes.

What the School Can Legitimately Withhold

FERPA carves out categories that are not education records even though they may sit in the school’s files.4eCFR. 34 CFR 99.3 – What Definitions Apply to These Regulations

  • A teacher’s personal notes kept as a memory aid and never shared with anyone else. Once shared with another staff member, the exemption disappears.
  • Records created and maintained by the school’s law enforcement unit for a law enforcement purpose. If that unit gives a copy to administrators for a disciplinary proceeding, the copy can become an education record.
  • Employment records, unless the person’s employment depends on being a student, as with a work-study position.
  • Treatment records for a student 18 or older made by a healthcare professional, used only for treatment, and disclosed only to treatment providers. Other privacy laws govern those.
  • Documents created or received after enrollment ends and not directly related to the person’s time as a student.
  • Grades on student work scored by classmates, until the teacher collects and records them. The Supreme Court confirmed this in Owasso Independent School District v. Falvo.8Legal Information Institute. Owasso Independent School District No I-011 v Falvo

College students should also know about waivers for confidential letters of recommendation. A student may voluntarily waive the right to inspect letters used for admissions, employment, or honors, but the waiver must be in writing and the school cannot require it as a condition of admission or any other benefit.9eCFR. 34 CFR 99.12 – What Limitations Exist on the Right to Inspect and Review Records Even after signing, you can still ask for the names of everyone who submitted a letter, and you can revoke the waiver in writing going forward.

How to Submit the Request

Put the request in writing. FERPA does not require a specific format, but a written request creates a paper trail and starts the 45-day clock. Many schools publish a standardized form through the registrar’s office; using it heads off any argument that the request was not valid.

Include the student’s full legal name, date of birth, and any student identification number. Be specific about what you want. Asking for “all education records” is your right, but narrowing the scope to particular record types or a date range usually speeds things up. If you want disciplinary files, say so. If you need records from a particular school year, specify it.

Send it by certified mail, hand-deliver with a receipt, or use the school’s secure electronic portal. What matters is proof of the date the school received it, because the 45-day compliance window runs from receipt.10Protecting Student Privacy. How Long Does an Educational Agency or Institution Have to Comply With a Request to View Records

Expect the school to verify your identity before releasing anything. Bring a government-issued ID. If you are a parent whose last name differs from the student’s, be ready to show documentation of the parental relationship.

What Happens in the 45 Days

Federal law requires compliance within a reasonable time, and in no case more than 45 days.1Office of the Law Revision Counsel. 20 USC 1232g – Family Educational and Privacy Rights Some states impose a shorter deadline, so check your state’s education code if speed matters. The school will typically arrange a review in an administrative office with a staff member present to protect the originals.

You have the right to ask for explanations. If a grade calculation, disciplinary code, or test score is unclear, the school must respond to reasonable questions about what the record means.11eCFR. 34 CFR 99.10 – What Rights Exist for a Parent or Eligible Student to Inspect and Review Education Records

Copies and Fees

Schools may charge a reasonable per-page fee for photocopies. They cannot charge for searching or retrieving records.12eCFR. 34 CFR 99.11 – What Are the Limitations on the Amount of a Fee If the fee would effectively prevent you from exercising your right — for example, when the records run hundreds of pages and the total is prohibitive — the school must waive or reduce the charge.

If distance makes an in-person visit impractical, the school must either send copies or make other arrangements so you can review the records.11eCFR. 34 CFR 99.10 – What Rights Exist for a Parent or Eligible Student to Inspect and Review Education Records Many schools now provide records through secure electronic portals, which eliminates copying fees.

Fixing Something Wrong in the Record

If you find information that is inaccurate, misleading, or violates the student’s privacy rights, you can ask the school to amend the record.13eCFR. 34 CFR 99.20 – How Can a Parent or Eligible Student Request Amendment of the Students Education Records Submit the request in writing, identify the specific record, and explain why. The school must decide within a reasonable time and notify you in writing.

One thing this process will not do: change a grade. The amendment right covers factual accuracy, not academic judgment. Grade disputes go through a separate appeal process the school sets on its own.

If the school denies your amendment request, you can demand a hearing. The school must give advance notice, and the hearing officer cannot be someone with a direct interest in the outcome. You may present evidence and bring an attorney at your own cost.14eCFR. 34 CFR 99.21 – Under What Conditions Does a Parent or Eligible Student Have the Right to a Hearing If the hearing officer sides with the school, you still have one option: place a written statement in the file explaining why you disagree. That statement becomes permanent and must be disclosed any time the school shares the portion of the record you contested.

When the School Won’t Comply

If the school ignores your request, misses the 45-day deadline, or otherwise violates FERPA, the enforcement path is a written complaint to the Student Privacy Policy Office at the U.S. Department of Education. File within 180 days of the violation or within 180 days of when you reasonably learned about it.15Protecting Student Privacy. File a Complaint

The complaint must describe specific facts giving reasonable cause to believe a violation occurred. Submit it by email to FERPA.Complaints@ed.gov or by mail to the Student Privacy Policy Office at 400 Maryland Ave, SW, Washington, DC 20202-8520. A fillable PDF complaint form is available on the office’s website. The office asks that you try to resolve the issue with the school first, and that often works because schools take the prospect of a federal complaint seriously.

One boundary matters here: FERPA does not let you sue a school in court. The Supreme Court held in Gonzaga University v. Doe that FERPA’s provisions do not create individually enforceable rights under federal civil rights law.16Justia US Supreme Court. Gonzaga Univ v Doe, 536 US 273 (2002) Enforcement runs through the Department of Education, which can ultimately threaten to withhold federal funding from a non-compliant school. That threat carries real weight, but the process is administrative. A FERPA complaint will not produce monetary damages.

The Directory Information Opt-Out

Separate from the right to inspect, schools may release basic information — name, address, phone number, email, date of birth, enrollment status, participation in activities — without consent, as long as the school has classified that data as “directory information” and given families a chance to opt out.17U.S. Department of Education. 34 CFR Part 99 – Family Educational Rights and Privacy Social Security numbers and any student ID number that could be used to access records without additional authentication are never directory information.

The school must notify families each year about which categories it has designated and give a defined window to opt out in writing. If you opted out while enrolled, that opt-out stays in effect after you leave unless you revoke it. If you have concerns about basic information being shared with outside organizations, military recruiters, or media, the opt-out is worth the two minutes it takes at the start of the school year.