Under the Family Educational Rights and Privacy Act, FERPA directory information is the category of student data a school may release without asking for consent first — things like your name, address, phone listing, email, dates of attendance, and similar low-sensitivity items. The tradeoff is that you have the right to block it. If you never opt out, your school can hand those details to anyone the school’s policy allows.
What Schools Can Include
Federal regulations define directory information as data in a student’s education record that “would not generally be considered harmful or an invasion of privacy if disclosed.”1Office of the Law Revision Counsel. 20 USC 1232g – Family Educational and Privacy Rights The statute lists examples, and each school picks which ones to designate in its own policy. Common categories include:
- Basic contact details: name, address, telephone listing, and institutional email address
- Biographical information: photograph, date and place of birth
- Academic information: major field of study, grade level, enrollment status (full- or part-time, undergraduate or graduate), dates of attendance, degrees and honors received, and the most recent school previously attended
- Activities: participation in officially recognized activities and sports, including the weight and height of athletic team members
The list is illustrative, not fixed. A school can add other items that fit the general “not harmful, not an invasion of privacy” standard. It can also narrow disclosure to specific recipients or purposes — for example, releasing names and emails only to campus organizations and scholarship providers. Whatever the school announces in its public notice is what binds it.2Protecting Student Privacy. Family Educational Rights and Privacy Act (FERPA) – Section 99.37
Student ID numbers and electronic usernames sit in a gray zone. They can be treated as directory information only if the number cannot on its own unlock education records; a password or PIN must sit between the ID and the file.3GovInfo. 34 CFR 99.3 – Definitions
What Cannot Be Directory Information
Some data is categorically off the table. A student’s Social Security number can never be designated as directory information, and neither can an ID number that works as a standalone key to education records.3GovInfo. 34 CFR 99.3 – Definitions
Grades and GPA are not directory information either. The Department of Education has said a school generally cannot release a student’s GPA without consent.4Protecting Student Privacy. Is It Permissible to Release Grade Point Average (GPA) to Honors Organizations Without Consent Disciplinary records, financial information, and disability status are protected as part of the broader education record and require written consent to disclose.
How to Opt Out
Before releasing any directory information, a school must give parents and eligible students a public notice covering three things: which categories the school has designated, the right to refuse disclosure, and the deadline for submitting a written opt-out.2Protecting Student Privacy. Family Educational Rights and Privacy Act (FERPA) – Section 99.37 Most schools fold this into the annual rights notification at the start of the academic year.
To block disclosure, submit a written request to the school within the timeframe stated in that notice.5Protecting Student Privacy. Directory Information Most deadlines fall early in the fall semester, though they vary. Miss the window and your information usually stays releasable for the rest of that academic year.
One detail catches people off guard: an opt-out submitted while you’re enrolled sticks after you leave. The school must keep honoring it unless you rescind it. And if you never opted out as a student, the school can keep disclosing your directory information as a former student without running a new notice-and-opt-out process.2Protecting Student Privacy. Family Educational Rights and Privacy Act (FERPA) – Section 99.37
What an Opt-Out Won’t Do
The right to opt out has limits. Even with a block in place, a school can still require you to share your name, student identifier, or institutional email address within a class you’re enrolled in. A professor can still call your name, and classmates can still see who’s on the roster.2Protecting Student Privacy. Family Educational Rights and Privacy Act (FERPA) – Section 99.37
Schools can also require you to wear or display an ID badge that shows information designated as directory information, regardless of your opt-out. Campus security, building access, and meal plans depend on visible identification, and an individual opt-out doesn’t override those functions.3GovInfo. 34 CFR 99.3 – Definitions
Military Recruiters Are a Separate Track
A distinct federal law, 20 U.S.C. § 7908, requires every school district receiving federal education funding to provide military recruiters with the name, address, and telephone listing of each secondary school student on request. This obligation runs alongside FERPA, not through it.6Office of the Law Revision Counsel. 20 U.S. Code 7908 – Armed Forces Recruiter Access to Students and Student Recruiting Information Parents can opt out with a separate written request, and the statute prohibits schools from using an opt-in default.
Some schools combine the FERPA notice with the military recruiter notice, in which case one opt-out covers both. Others use separate notices, meaning you may need to file two requests to block both channels.7United States Department of Education. Military Recruiter Access to Student Information Under ESEA and FERPA Read your school’s notification closely.
Consequences of Blocking Directory Information
The immediate effects show up on campus. A student who opts out will typically be left out of the student directory, the yearbook, the commencement program, and dean’s list announcements. Athletic rosters and honor society recognitions may omit the name. Media inquiries about achievements go unanswered.
The delayed effect is the one that surprises people. Schools treat degree and enrollment verification as a directory information disclosure. If an employer, licensing board, or background check company contacts your registrar to confirm your degree, a directory hold blocks that confirmation.2Protecting Student Privacy. Family Educational Rights and Privacy Act (FERPA) – Section 99.37 Because the opt-out survives graduation, a block placed years ago can stall a job offer today. Fixing it means contacting the school and rescinding the hold in writing.
If a School Discloses Information Improperly
FERPA enforcement runs through the U.S. Department of Education, not the courts. The law does not give individuals the right to sue a school. You file a written complaint with the Department’s Student Privacy Policy Office within 180 days of learning about the violation, describing specific facts that show noncompliance.8Protecting Student Privacy. How May a Parent or Eligible Student File a FERPA Complaint With the Department of Education
If the Department finds a policy or practice of noncompliance, it can withhold further federal payments, issue a cease-and-desist order, or terminate the school’s eligibility to receive federal funding.9Protecting Student Privacy. Family Educational Rights and Privacy Act (FERPA) Full termination is rare in practice. Most complaints end with the Department working with the school to correct its practices, and the funding threat is generally enough to get compliance moving.