Student Disciplinary Records: FERPA Access, Retention, and Corrections

Student disciplinary records are the internal files a school creates when you are accused of violating its code of conduct, and under the Family Educational Rights and Privacy Act (FERPA) they generally cannot be shared without your written consent. They sit separately from your academic transcript, though serious sanctions sometimes appear there as a notation. How long a school keeps them, and whether they follow you into graduate school or a career, depends less on the record itself than on what you are later asked to disclose about it.

What’s in the File

A disciplinary file documents a single conduct case from start to finish. It typically contains the formal charges, written statements from witnesses or the complainant, and evidence gathered during the investigation such as emails, security camera footage, or photographs. The most detailed piece is usually the hearing summary or transcript. The outcome is recorded too, whether that was a warning, disciplinary probation, suspension, or expulsion.

Two related records are governed by different rules. Sexual misconduct complaints handled under Title IX produce their own grievance file with its own retention requirements. And law enforcement records created and maintained by a campus police department are not education records under FERPA at all, even when they describe the same incident.¹

One shift in control catches families off guard. In K-12, parents hold the FERPA rights. Once you turn 18 or enroll in any postsecondary institution, those rights transfer entirely to you, and your parents no longer have access without your written consent, no matter who pays tuition.²

Who Can See the Record Without Your Consent

FERPA, codified at 20 U.S.C. § 1232g, controls disclosure of your education records, and the implementing rules sit at 34 CFR Part 99.³⁴ The default is written consent before disclosure. The exceptions are narrower than most people assume.

School officials, including outside contractors performing institutional functions, may see records when they have a legitimate educational interest in doing their job. Schools must use reasonable methods to keep that access limited to the officials who actually need it.⁵
Schools must comply with lawful subpoenas and judicial orders. In most cases the school must make a reasonable effort to notify you before releasing anything.
In a genuine health or safety emergency, a school can share relevant information with law enforcement or other appropriate parties.
Records, including disciplinary files, can be sent to another school where you seek or intend to enroll. For K-12 students, federal law goes further and requires states to have procedures for transferring suspension and expulsion records between schools.⁶

Schools can also release properly de-identified data. Removing your name alone is not enough; the school must account for indirect identifiers and prior data releases that could allow re-identification.⁷

When Disciplinary Findings Become Public

FERPA carves out a specific exception at colleges and universities for serious offenses. If you are accused of a crime of violence or a non-forcible sex offense, the school may disclose the final results of its proceeding to the alleged victim regardless of outcome. If the school finds you responsible, it may disclose those final results to anyone, including the general public.⁵

What “final results” means is limited by statute: your name, the violation, and the sanction. Names of victims and witnesses cannot be included without their written consent.³

Title IX cases add their own privacy layer on top of FERPA. Schools must take reasonable steps to protect the privacy of all parties and witnesses during an investigation, and personally identifiable information from the Title IX process cannot be disclosed except with written consent, to carry out Title IX’s purposes, as required by law, or as FERPA otherwise permits.⁸

How Long Schools Keep the File

No single federal law sets a retention period for a standard disciplinary file. The timeline is set by institutional policy, state records-retention schedules, and the seriousness of the offense. Minor infractions are often purged at graduation or shortly after. More significant sanctions such as suspensions for academic dishonesty are commonly retained for five to seven years. Records of permanent expulsion are frequently kept indefinitely.

Title IX is the exception. Federal regulations require a minimum seven-year retention period for all Title IX grievance records, regardless of outcome, along with the training materials used for Title IX personnel.⁸

Once a record is destroyed, it is gone from the school’s files. That does not always end the matter. Many applications ask whether you were ever found responsible for a conduct violation, and a deleted record does not erase your obligation to answer that question honestly.

Where the Record Follows You

Most long-term consequences come from self-disclosure, not from a school leaking your file. Application processes for graduate school, licensing, and federal employment routinely ask you to describe your own history.

Undergraduate Admissions

The Common Application removed its school-discipline question from the shared portion of the application starting with the 2021-2022 cycle.⁹ Individual member schools can still ask in their supplements. If a school asks and you answer dishonestly, that is usually a far bigger problem than the original violation.

Medical School

The AMCAS application used by most medical schools requires you to disclose any “institutional action” for unacceptable academic performance or a conduct violation. The only exception is when the institution has since deleted or removed the action from your record entirely. Everything from a residence hall policy violation to a code of conduct infraction falls within the disclosure requirement.¹⁰

Law School and Bar Admission

Law school applications ask about disciplinary history, and the character and fitness evaluation for bar admission asks again. Bar examiners compare your answers to what you disclosed on your law school application. Inconsistencies raise questions about current character and fitness even when the underlying incident was minor. The consistent guidance from bar examiners is that failing to disclose does more damage than the conduct itself, and this holds even if the school has destroyed the file in the meantime.

Security Clearances

Federal background investigations for security clearances include checks at educational institutions. The Defense Counterintelligence and Security Agency may send written inquiries to your school or dispatch an investigator in person to verify what you put on your questionnaire.¹¹ You sign releases as part of the process, which authorizes access to your records without needing a separate FERPA consent.

Reviewing and Correcting Your Record

FERPA gives you the right to inspect and review your disciplinary file. Most schools route requests through the Office of Student Conduct or the Registrar and require a formal request form with your legal name, student ID, and the date range of the records you want. The school must provide access within a reasonable period and no later than 45 calendar days after the request.¹² Schools may charge a reasonable fee for physical copies but cannot charge you to inspect the records in person.

If the school ignores or refuses your request, you can file a written complaint with the Student Privacy Policy Office at the U.S. Department of Education. The complaint must be filed within 180 days of the violation or of when you learned about it.¹³

If you find information in your file that is factually inaccurate, misleading, or violates your privacy, you can ask the school to amend it. The school must consider the request and respond within a reasonable time. If it refuses, you have the right to a formal hearing.¹⁴ Even if you lose at the hearing, you can place a written statement of disagreement in the file, and the school must keep that statement with the record and disclose it whenever the record is shared.

One limitation trips people up. The amendment right covers factual errors and privacy violations, not substantive decisions. You cannot use it to challenge the finding, the sanction, or a grade. For those, you have to use the school’s appeal procedures instead.¹⁵

1
U.S. Department of Education. Are Law Enforcement Records Protected Under FERPA?
2
U.S. Department of Education. Eligible Student
3
Office of the Law Revision Counsel. 20 USC 1232g – Family Educational and Privacy Rights
4
eCFR. 34 CFR Part 99 – Family Educational Rights and Privacy
5
eCFR. 34 CFR 99.31 – Under What Conditions Is Prior Consent Not Required to Disclose Information
6
U.S. Department of Education. 34 CFR Part 99 – Family Educational Rights and Privacy
7
U.S. Department of Education. Data De-identification: An Overview of Terms
8
eCFR. 34 CFR Part 106 – Nondiscrimination on the Basis of Sex in Education Programs or Activities Receiving Federal Financial Assistance
9
Common App. Common App Removes School Discipline Question on the Application
10
Association of American Medical Colleges. Institutional Action
11
Defense Counterintelligence and Security Agency. Investigations and Clearance Process
12
U.S. Department of Education. How Long Does an Educational Agency or Institution Have to Comply With a Request to View Records?
13
U.S. Department of Education. File a Complaint
14
U.S. Department of Education. 34 CFR Part 99 – Family Educational Rights and Privacy – Section 99.21
15
U.S. Department of Education. An Eligible Student Guide to the Family Educational Rights and Privacy Act (FERPA)