FERPA Frequently Asked Questions
Students
Students wishing limited disclosure may complete the Restrict Release of Directory Information form and submit the request with the University Registrar. We will suppress your directory information in the UTHSC Directory, and will exclude the directory information by contacting the IT department and notifying the Banner Student Information System that you have restricted release of public or student directory information without written consent. Students who have questions may visit:
- Office of the Registrar, 910 Madison Ave, Suite 520, Memphis, TN 38163, 901-448-5568, registrar@uthsc.edu.
A paper copy will be provided upon request.
FERPA permits the University to disclose directory information without a student's consent unless a student, prior to the 14th calendar day after the term begins, notifies the Office of the Registrar in writing of his or her desire to restrict directory information from being published
By opting out of directory information, the University will not include or use the student's photo, image, and/or voice in any and all University of Tennessee Health Science Center and/or University of Tennessee newsletters, articles, news releases, brochures or other communications and marketing materials. During the first day of classes for the term in which the student plans to graduate, the student MUST file a written request with the Registrar's Office to have his or her name included in the official Commencement Program.
Education records may be accessed by “school officials” who have a legitimate educational interest in the student. School officials include individuals currently classified as administrators, faculty, staff, contractors (including National Student Clearinghouse), consultants, volunteers and other outside parties to whom the institution has outsourced services or functions including persons serving on the Board of Trustees, or a student serving on an official committee or assisting another school official while performing institutional functions with legitimate education interests.
A school official has a “legitimate educational interest” if the official needs to review an education record containing personally identifiable educational information in order to fulfill his or her professional responsibility to the University. Records should be used only in the context of official educational business.
When a student reaches 18 years of age or is attending an institution of post-secondary education, FERPA rights transfer from parent to student. Therefore, at the post-secondary level, parents have no inherent rights to inspect their son’s or daughter’s education records. Information regarding education records is best obtained by direct communication between the parent and the student. However, parents who have declared a student as a dependent on their most recent Federal Income Tax form may have access to their child’s education records.
The spouse has no rights under FERPA to access the student’s education record. A student may grant access to the spouse by completing the Student Education Record Release Form.
In the event of a health or safety emergency, can the school disclose information to my parents?
Parents
The rights under FERPA transfer from the parents to the student, once the student turns 18 years old or enters a postsecondary institution at any age. However, although the rights under FERPA have now transferred to the student, a school may disclose information from an "eligible student's" education records to the parents of the student, without the student's consent, if the student is a dependent for tax purposes. Neither the age of the student nor the parent's status as a custodial parent is relevant. If a student is claimed as a dependent by either parent for tax purposes, then either parent may have access under this provision. (34 CFR § 99.31(a)(8).
A “dependent student” means a child under the age of 24 who is a student and who is claimed by a parent as a dependent of the parent on the parents’ Federal Income Tax Form (1040). FERPA allows the disclosure of non-directory information about the student to the parent if the institution can establish the dependency status of the student.
- The parent(s) should make their request in writing, indicating the particular records requested and declaring specifically that the student is the requestor(s)’s dependent.
- The institution must ask for the Federal Income Tax Form filed by the parents for the most recent tax year. The institution is not entitled to maintain a copy of that federal tax form; so verification is made and noted on the written request for records and the tax forms are returned to the parent(s).
- Since FERPA rights belong to the eligible student, the institution should notify the student that his or her parent(s) have asked to review records. Like the advice that is mailed out upon receipt of a subpoena for records, the institution should instruct students that records will be provided to their parents for review on a particular date. If a student responds that he or she does not want the records shared with his or her parent(s), the institution should refer the parent(s) back to the student. At this point, in order to provide access to the student's records, a prior, written consent is required from the student.
The problem may arise when students indicate that they do not wish the institution to share records with their parent(s). Because the student is an adult and guaranteed full rights under FERPA, the recommendation in this case is that the institution refer the parent(s) back to the student. Our effective, non-emotional approach is to provide the parent(s) with a copy of our Annual Notification and explain that the privacy of student records is governed by federal regulations that guarantee students certain rights.
Faculty
FERPA protects the privacy of education records. As a faculty member you have a responsibility to protect educational records in your possession. You may not disclose personally identifiable information about students or permit inspection of their records without written permission from the student, unless such action is covered by certain exceptions permitted by FERPA (see Annual Notification of Student Rights section of these webpages for more information on the disclosure of personally identifiable information from students’ education records.
Information that is defined as “directory information” may be released without student consent unless the student has directed the university to withhold such information. If such a hold is in place, then Banner Self-Service will show a notification of confidentiality and no information may be released about that student, including no verification as to whether or not the individual is a student at UTHSC. If a student has a filed a Request to Withhold Directory Information Form, "Confidential" will appear next to the student's name on the class list (class roll) that is pulled from Banner Self-Service.
Protection of student privacy is crucial, and the consequences of mishandling of student information are significant. When in doubt, do not release student information—consult your department head, college administrators, or the Registrar’s Office.
Directory information may be released without the written consent of the student, unless the student has filed a Request to Withhold Directory Information Form. If such a hold is in place, then no information may be released about that student, including no verification as to whether or not the individual is a student at UTHSC. If a student has a filed a Request to Withhold Directory Information Form, "Confidential" will appear next to the student's name on the class list (class roll) that is pulled from Banner Self-Service.
An institution may not disclose or confirm directory information without the student’s written consent if the student’s social security number or other non-directory information is used alone or combined with other data elements to identify the student.
The following items are considered “directory information” at UTHSC:
- Student's name
- Local and permanent addresses
- Institutional email address
- Telephone number
- Year of birth
- Major field of study
- Dates of attendance at UTHSC
- Degrees, honors, and awards granted or received and dates granted or received
- Academic classification such as freshman, sophomore, junior, senior, etc.
- Most recent educational institution previously attended
- Dissertation or thesis title
- Advisor or thesis/dissertation advisor
- Participation in officially recognized organizations, activities, sports
- Parents' names and addresses (city and state only)
Yes. FERPA requires that institutions use “reasonable methods” to verify the identity of students, school officials, parents and others to whom information from education records is disclosed. The use of “widely available” information to verify identity, such as name, date of birth, social security number or student ID number, is not considered reasonable or sufficient.
Identity verification must include at least one element that is either known or possessed only by that person, for example:
- Photo ID
- Random PIN or token
- Password
- Biometric factors (ex: fingerprint scan, voice or facial recognition, etc.)
At the elementary and secondary school level, FERPA gives parents the right to access education records. When a student reaches 18 years of age or is attending an institution of post-secondary education, FERPA rights transfer from parent to student. Therefore, at the postsecondary level, parents have no inherent rights to access their son’s or daughter’s education records.
Information such as a student’s enrollment in a course, class attendance, or progress/grades in a course is personally identifiable information that constitutes part of the student’s education record that is protected under FERPA. Students may grant a parent or other individual view-only access to specific records by filing a Student Education Record Release Form.
If a student has provided such consent to discuss records, faculty members may release information to parents, provided the identity of the parents has been authenticated. Parents of a dependent student may challenge denial of access to educational records by providing to the Registrar’s Office evidence that they declare the student as a dependent on their most recent Federal Income Tax form (Form 1040).
In this case, faculty members may release information to parents, provided the identity of the parents has been authenticated. Even if no specific information can be released about a student, faculty members may be able to assist parents by providing general information that does not violate FERPA, such as course requirements, a copy of the course syllabus, and other similar information.
As a faculty member, you may be asked to write a letter of recommendation on behalf of a student. If the letter includes information that falls within FERPA’s definition of educational records, such as grade point average or other non-directory indicators, the student’s written consent to disclose this information would be necessary. Unless the student has waived the right of access to the letter, he or she would have the right to read it, because it is part of the student's educational record.
The written release from the student should:
- Specify the records that may be disclosed
- State the purpose of the disclosure, and
- Identify the party or class of parties to whom disclosure may be made (FERPA § 99.30)
- Be signed and dated by the student
- Statements in a recommendation that are based on the faculty member’s personal observations about a student do not require a written release from the student.
Staff
FERPA protects the privacy of education records. As a staff member you have a responsibility to protect educational records in your possession. You may not disclose personally identifiable information about students or permit inspection of their records without written permission from the student, unless such action is covered by certain exceptions permitted by FERPA (see Annual Notification of Student Rights section of these webpages for more information on the disclosure of personally identifiable information from students’ education records.
Information that is defined as “directory information” may be released without student consent unless the student has directed the university to withhold such information. If such a hold is in place, then Banner will show a notification of confidentiality and no information may be released about that student, including no verification whether or not the individual is a student at UTHSC. If a student has a "Confidential" will appear next to the student's name on the class list (class roll).
Protection of student privacy is crucial, and the consequences of mishandling of student information are significant. When in doubt, do not release student information—consult your department head, college administrators, or the Registrar’s Office.
Directory information may be released without the written consent of the student, unless the student has filed a Request to Withhold Directory Information Form. If such a hold is in place, then no information may be released about that student, including no verification as to whether or not the individual is a student at UTHSC. If a student has a filed a Request to Withhold Directory Information Form, "Confidential" will appear next to the student's name on the class lists (class rolls).
An institution may not disclose or confirm directory information without the student’s written consent if the student’s social security number or other non-directory information is used alone or combined with other data elements to identify the student.
The following items are considered “directory information” at UTHSC:
- Student's name
- Local and permanent addresses
- Institutional email address
- Telephone number
- Year of birth
- Major field of study
- Dates of attendance at UTHSC
- Degrees, honors, and awards granted or received and dates granted or received
- Academic classification such as freshman, sophomore, junior, senior, etc.
- Most recent educational institution previously attended
- Dissertation or thesis title
- Advisor or thesis/dissertation advisor
- Participation in officially recognized organizations, activities, sports
- Parents' names and addresses (city and state only)
Yes. FERPA requires that institutions use "reasonable methods" to verify the identity of students, school officials, parents and others to whom information from education records is disclosed. The use of "widely available" information to verify identity, such as name, date of birth, social security number or student ID number, is not considered reasonable or sufficient.
Identity verification must include at least one element that is either known or possessed only by that person, for example:
- Photo ID
- Random PIN or token
- Password
- Biometric factors (ex: fingerprint scan, voice or facial recognition, etc.)
At the elementary and secondary school level, FERPA gives parents the right to access education records. When a student reaches 18 years of age or is attending an institution of post-secondary education, FERPA rights transfer from parent to student. Therefore, at the postsecondary level, parents have no inherent rights to access their son’s or daughter’s education records. Information such as a student’s enrollment in a course, class attendance, or progress/grades in a course is personally identifiable information that constitutes part of the student’s education record that is protected under FERPA. Students may grant a parent or other individual view-only access to specific records by filing a Student Education Record Release Form.
If a student has provided such consent to discuss records, faculty members may release information to parents, provided the identity of the parents has been authenticated. Parents of a dependent student may challenge denial of access to educational records by providing to the Registrar’s Office evidence that they declare the student as a dependent on their most recent Federal Income Tax form (Form 1040). In this case, faculty members may release information to parents, provided the identity of the parents has been authenticated. Even if no specific information can be released about a student, faculty members may be able to assist parents by providing general information that does not violate FERPA, such as course requirements, a copy of the course syllabus, and other similar information.
As a staff member, you may be asked to write a letter of recommendation on behalf of a student. If the letter includes information that falls within FERPA’s definition of educational records, such as grade point average or other non-directory indicators, the student’s written consent to disclose this information would be necessary. Unless the student has waived the right of access to the letter, he or she would have the right to read it, because it is part of the student's educational record.
The written release from the student should:
- Specify the records that may be disclosed
- State the purpose of the disclosure, and
- Identify the party or class of parties to whom disclosure may be made
- Be signed and dated by the student (FERPA § 99.30)
Statements in a recommendation that are based on the staff member’s personal observations about a student do not require a written release from the student.