Skip to main content

Secondary navigation:

FERPA: What Faculty and Staff Members Need to Know

office of student services

Please note: Some of these files are Adobe Reader® (PDF) formatted files. To view them, you will need to download the free Adobe Reader.

(Download a printable version.)


August 2018

It's the Law

FERPA (Family Educational Rights and Privacy Act) was passed by Congress in 1974. It grants four specific rights to a post-secondary student:

  • to see the records that the institution is keeping on the student.
  • to seek amendment to those records and in certain cases append a statement to the record.
  • to withhold the disclosure of a student’s educational records except for situations involving legitimate educational interest or as may be required by law.
  • to file a complaint with the FERPA Office in Washington.

FERPA applies to all educational agencies or institutions, including Boston College, that receive funds under any program administered by the Secretary of Education.

FERPA governs what may be released, but does not require that any information be released.

It's Your Responsibility

You may not disclose personally identifiable information from educational records to persons other than the student in question and a University official who has a legitimate educational interest.

A University official has a legitimate educational interest in access to information when that information is appropriate for use in connection with: performing a task that is related to the student’s education; providing a service or benefit relating to the student or student’s family, such as housing, health care, counseling, job placement, or financial aid; performing a task related to the discipline of a student; maintaining the safety and security of the campus; or otherwise performing a task related to the effective functioning of the University.

As a general principle, you may not disclose student information in oral, written, or electronic form to anyone except BC staff and faculty who need the information to perform their university functions.

You have a legal responsibility under FERPA to protect the privacy of the student educational records in your possession, which are classified as confidential information under BC's Data Security Policy. You may not access educational records for personal reasons.

Student information stored in an electronic format must be secure and available only to those entitled to access that information.

You may not release lists or files with student information to any third party outside your college or departmental unit.

Student information should not be stored on laptops or home computers unless it is encrypted. Personal digital assistants used to read confidential data should be password protected.

Student information in paper format must be shredded before disposal or placed in a locked disposal bin.

Student Information Types

Student educational records include records directly related to a student and maintained by the institution or by a party acting for the institution. Examples include exams, papers, advising or other notes about a student, applications, financial documents, and any correspondence that contains information about a student, including e-mail correspondence.

FERPA requires institutions to allow students to review educational records upon request.

Personal notes maintained by and for a sole individual as a memory aid and not made available to any other faculty or staff members are exempted from this requirement under FERPA. (But note that these “sole possession notes” could be subject to discovery through a subpoena).

Exclusions to student educational records include certain law enforcement records, certain treatment records, non-matriculant records, employment records, and post-graduation alumni records.

Directory Information
Directory information is certain, defined categories of information in the education records of a student that would not generally be considered harmful or an invasion of privacy if disclosed.

Information designated by the University as directory information includes e-mail addresses, local and home addresses, telephone numbers, and enrollment status. This information is considered public and can be released without the student’s written permission, unless the student has opted to keep this information confidential.

Directory information does not include:

  • ethnicity or race
  • gender
  • nationality
  • social security number
  • student identification number
  • religious affiliation
  • grades or GPA
  • course enrollment or schedule

How can a student withhold release of directory information?

A student can prevent the release of all directory information including verification of enrollment, and may suppress selected directory information either to the Boston College community or to the general public. In order to do this, students must visit to suppress the release of all or selected directory information. Suppression is available by selecting Privacy Preferences. Student directory information will not be blocked from faculty and staff conducting official University business.

Can student directory or public information always be released?

Student directory information should not be released to third parties. All inquirers should be referred to the online directory. Students have set their Privacy Preferences identifying the information that can be released to both internal and external audiences. Directing inquiries to the online directory will ensure that the information released is based on students’ current preferences.

Can student non-directory information ever be released?

All non-directory information is considered confidential under FERPA and will not be released to outside inquiries without the express written consent of the student, unless it falls within a specific exception under the law.

What should I do if I’m concerned about a student’s health or safety, or the health or safety of those around the student?

You should speak with your department chair, dean, director, or Counseling Services anytime you have a health or safety concern. As discussed above, FERPA allows you to make disclosures of education records to others within the University who have legitimate educational interests in the information and this would include a good faith health or safety concern. FERPA also permits disclosures of information in a health or safety emergency, if in light of the circumstances and information available at the time, knowledge of the information is necessary to protect the health or safety of a student or other individuals. Your own personal observations of a student’s behavior or condition generally are not considered educational records. Federal and state rules limit what may be disclosed from a student’s health or counseling records, to you or to others, but these rules also contain exceptions for community health and safety emergencies. So, if you have a concern about a student, first and foremost, report it.

What if someone needs to reach the student because of an emergency?

All such inquiries should be directed to Campus Police.

What are parental rights under FERPA?

When a student reaches the age of 18 or begins attending a post-secondary institution regardless of age, FERPA rights transfer to the student. It is generally the University’s practice not to make disclosures from a student’s educational records involving academic matters to parents without the student’s written consent. Refer inquiries to the student’s associate academic dean.

What must I do if I receive a subpoena concerning student educational records?

A fax of the subpoena should be sent immediately to the Office of the General Counsel. The fax number is 617-552-0961. The Office of the General Counsel will determine whether and how to comply with the subpoena and will determine whether notification to the student is required.

For more information

See the Student Educational Records and Data Security policies on the BC Policies and Procedures website or contact Kathy McGuinness in the Office of Student Services. You may also contact the Office of the General Counsel at 617-552-0960.


  • disclose information to a student or University official before authenticating the identity of the person.
  • disclose confidential non-directory information about a student to the media. The official spokesperson for the university is Jack Dunn, Associate Vice President, Office of University Communications, 617-552-3350.
  • link a student’s name with his/her social security number, BC student ID number, or any portion of these numbers in any manner.
  • send confidential information such as grades in an e-mail.
  • post grades or leave graded tests, papers, or other student materials for students to pick up in a stack that requires sorting through the papers of all students. 
  • include confidential information such as grades or GPA in a recommendation without the written consent of the student.
  • discuss the progress of any student with anyone other than the student or the student’s advisor without the consent of the student. Refer inquiries from any other parties including the student’s parents to the student’s associate academic Dean.
  • provide anyone with lists or files of students enrolled in your classes for any commercial purpose.
  • provide anyone with student schedules or assist anyone other than university employees in finding a student on campus. Refer such inquiries to Campus Police.
  • access the records of any student for personal reasons.
  • release your password for ANY reason.