FERPA: More Information

Family Educational Rights and Privacy Act (FERPA)

Overview

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student educational records. This law applies to all schools that receive funds under an applicable program of the U.S. Department of Education. 

Key Terms
  • Directory Information - Information contained in an Education Record of a Student that would not generally be considered harmful or an invasion of privacy if Disclosed. What is and is not considered directory information under FERPA can be found here.
  • Education Records - Records that are directly related to a Student, maintained by the University or by a party acting for the University. What is and is not considered education record under FERPA can be found here.
  • Eligible Student - a student who has reached 18 years of age or is attending an institution of postsecondary education
  • Parent - a parent of a student, including a natural parent, a guardian, or an individual acting as a parent in the absence of a parent or guardian
  • Personally Identifiable Information (PII) - Information that can be used to distinguish or trade a Student's identity with reasonable certainty either directly or indirectly through linkages with other information. This term includes but is not limited to:
    • student's name
    • name of student's parent or other family members
    • address of student or student's family
    • a personal identifier, such as the student's social security number, student number, or biometric record
    • other indirect identifiers, such as the student's date of birth, place of birth, and mother's maiden name
    • other information that, alone or in combination, is linked or linkable to a specific student that would allow a reasonable person in the school community, who does not have personal knowledge of the relevant circumstances, to identify the student with reasonable certainty
    • information requested by a person who the educational agency or institution reasonably believes knows the identity of the student to whom the education record relates
Student Rights
  • Right to inspect and review their education records.
    • A student has the right to inspect and review their Education Records, subject to limitations.
  • Right to exercise limited control over the disclosure of information contained in their Education Record.
    • The University may disclose information contained in Education Records to third parties when a student provides written consent permitting such disclosure.
  • Right to Request to Amend their Education Records.
    • A Student has the right to request that the University amend their Education Record that they
      believe to be inaccurate, misleading, or in violation of their privacy rights.
  • Right to file a complaint with the United States Department of Education.
    • A Student has the right to file a complaint with the U.S. Department of Education Student Privacy Policy Office (SPPO) if they believe one of their primary rights under the FERPA Regulation has been violated. 

Notification Requirements 

  • Annual Notice of Rights 

    In addition to the primary rights afforded to Students in compliance with FERPA and under this Policy, the University is required to notify Students In Attendance of their FERPA rights on an annual basis. Procedure AC 04 establishes the process for informing a Student of their FERPA rights under this Policy. This process includes the responsibility of the Office of the University Registrar to disseminate an Annual Notice to all Students. The Annual Notice can be accessed at: https://www.registrar.pitt.edu/students/ferpa. 

  • Notice on Directory Information 

    The University is also required to notify students that it may Disclose Directory Information from Education Records without written consent from a Student unless that Student has notified the University in writing of their request to restrict the Disclosure of their directory information. See Procedure AC 04, Section III. G for details on how to make that notification. 

    When the Office of the University Registrar received written notice of a Student's request to restrict the Disclosure of Directory Information no further Disclosure of Directory Information can be made without the Student's Written Consent (unless allowed under other exceptions to Written Consent in Appendix A).