The Family Educational Rights and Privacy Act (FERPA) is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.

Family Educational Rights and Privacy Act of 1974 (FERPA)

In 1974, Senator James Buckley of New York was concerned with the misuse and abuse of student records, particularly at elementary and secondary schools. In several instances, some schools revealed confidential information about their students to people who did not have a legitimate interest in the material. Some of these student files contained comments that were irrelevant or unsupported, such as statements about a student’s psychological makeup by a person not qualified to make such an assessment. Sen. Buckley introduced legislation to protect the confidentiality and accuracy of student records.

FERPA for Post-Secondary Students

The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99), also known as the Buckley Amendment, is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.

FERPA rights transfer from the parent/guardian to the student when he or she reaches the age of 18 or attends a school beyond the high school level.

Directory Information

Institutions may disclose, without consent, “directory” information. At EWU directory information includes:

  • student’s name;
  • address;
  • e-mail address;
  • telephone number;
  • participation in officially recognized activities and sports;
  • weight, height and birth dates of members of athletic teams;
  • dates of attendance at EWU;
  • degrees, honors and awards received;
  • the most recent previous educational agency or institution attended by the student

However, students may request that the institution not disclose directory information about them. This “directory restriction” prevents the release of any information regarding the student without the signed consent of the student.

Adding a Directory Restriction

Adding Directory Restriction is one of your rights to request under FERPA (the Family Educational Rights and Privacy Act).

When the Directory Restriction is applied to your academic record, Eastern will not release directory information which includes, but is not limited to: name, address, telephone number, email, student net ID, date of birth, major field of study, participation in officially recognized activities and sports, dates of attendance, and degrees and awards received, to a third party without your written consent.

Exceptions to release of directory information without your written consent include: upon presentation of a court order or subpoena, to student loan lenders (directly and/or through the National Student Clearinghouse), in a health and/or safety emergency, for routine administrative and statistical purposes, and under any other allowable exceptions outlined in FERPA, 34 CFR part 99.31.  EWU does not provide any student information to commercial enterprises or businesses.

Additionally, with a Directory Restriction you will not have information forwarded to the National Student Clearinghouse for the purposes of issuing enrollment verifications and degree verifications to insurance providers, potential employers, etc.  Your name will not appear on any publicly released honors list and will not be printed in the commencement program.  If you are a student athlete, this restriction will limit the ability of the university to share your name and other information with the media and/or any other third party.  You also will not receive any general University mailings about student life/campus activities. Additionally, Eastern Washington University staff will not discuss information about your student record with you over the phone and you must come to EWU in person to transact any business in regards to your student record or you will need to conduct all business with the university by logging into EagleNET.

Removing a Directory Restriction

Online or telephone removal of your directory restriction is not available.

If you wish to remove your directory restriction, you may make your request the following two ways:

In Person
During normal business hours, bring your picture identification to Records and Registration.

Written Request
Faxed, mailed or “scanned and emailed” requests are processed within two business days after receipt of the request. Note: emailed copies must have your signature to release the restriction.
Written requests must include:

  • Your printed name;
  • Your  EWU Identification Number;
  • Date of birth;
  • Daytime phone number or email address;
  • Your signature;
  • Copy of your driver’s license or state identification card.

Send your request to:
Records and Registration
201 Sutton Hall
Cheney WA 99004-2441
F: 509.359.6153

Or submit a ticket to regonline@ewu.edu for more information!

Need Help? Submit a Ticket Below!

Release Information to a Third Party

FERPA Training
FERPA 101: For Colleges and Universities
FERPA 201: Data Sharing Under FERPA

You will need to set up an external Department of Education account to access this training.


Release of Information (ROI)

If you would like a third party, such as your parent(s), to have access to information contained in your student record, an ROI may be the right choice for you.

By filling out the Release of Information form (ROI), you give the University permission to discuss information from your student record with the person you identify on the form. Please give the person you identify on the form your EWU id to use when they are requesting information. You may also fill out the pdf version Release of Information form and turn it into the Records and Registration office.

Transcripts will not be released to a third party without your written permission.

You may revoke an ROI at any time. Please contact the Records and Registration office to revoke a previously submitted ROI.

Faculty should confirm that a Release of Information is on file prior to discussing a student’s record with a third party.  Faculty may choose to have students complete a printable ROI available here.  Signed forms should be forwarded to Records and Registration to be added to the student’s file.

Student Rights Under FERPA

Students have the right to:

  • Inspect and review their education records maintained by the institution. Institutions are not required to provide copies of records unless, for reasons such as great distance, it is impossible for the eligible students to review the records. Schools may charge a fee for copies.
  • Request that an institution correct records which they believe to be inaccurate or misleading. If the institution decides not to amend the record, the student then has the right to a formal hearing. After the hearing, if the institution still decides not to amend the record, the student has the right to place a statement with the record setting forth his or her view about the contested information. However, FERPA does not allow students to challenge grades that they were awarded except to the extent that the grade was accurately recorded; or, to change the opinions or reflections another person reflected in an education record.

Consent to the release of their educational records to a third party. Generally, institutions must have written permission from the student in order to release any information from a student’s education record. However, institutions MAY disclose those records, without consent, to the following parties or under the following conditions (34 CFR § 99.31):

(1) Agencies or organizations requesting information in connection with a student’s application for, or receipt of, financial aid if the information is necessary to:

(a) Determine eligibility for financial aid;
(b) Determine the amount of financial aid;
(c) Determine the conditions of financial aid; or
(d) Enforce the terms and conditions of financial aid.

(2) Authorized representatives of the Comptroller General of the United States, the Attorney General of the United States, the Secretary of the U.S. Department of Education, or state or local authorities requiring access to education records, in connection with the audit or evaluation of a federal or state supported education program or in connection with the enforcement of or compliance with federal legal requirements which relate to such a program.

(3) School officials who have a legitimate educational interest in the records.

(a) A “school official” is:

(i) A person employed by the university in an administrative, supervisory, academic, research, support staff, law enforcement, or health care service position;
(ii) A person serving on the university’s board of trustees;
(iii) A student serving on an official university committee or assisting another school official in fulfilling their professional responsibilities (examples include, but are not limited to, service on a disciplinary committee and work study students); and
(iv) A contractor, consultant, volunteer or other party to whom the university has outsourced to provide a service and/or to assist another school official in conducting official business (examples include, but are not limited to, an attorney, an auditor, a collection agency, or the National Student Clearinghouse, an agency which acts as a clearinghouse for student loan deferment reporting).

(b) “Legitimate educational interest” exists if the information requested by the school official is necessary for the official to perform a task specified in his/her position description or contract agreement including: The performance of a task related to a student’s education; the performance of a task related to the discipline of a student; the provision of a service or benefit relating to the student or student’s family, such as a health education, counseling, advising, student employment, financial aid, or other student service related assistance; the maintenance of the safety and security of the campus; and/or the provision of legal assistance regarding a student matter.

(4) Parent of a minor student or a nonminor dependent student, as defined in the Internal Revenue Code and upon submission of a copy of the most recent Internal Revenue Service annual tax return showing the student as a dependent.

(5) Officials of another school, school system, or institution of postsecondary education where the student seeks or intends to enroll, or where the student is already enrolled so long as the disclosure is for purposes related to the student’s enrollment or transfer.

(6) Organizations conducting studies for, or on behalf of, the university for the purpose of developing, validating, or administering predictive tests; administering student aid programs; or improving instruction, if the studies are conducted in a manner that will not permit the personal identification of students or their parents by persons other than representatives of such organizations who have legitimate interests in the information; such information will be destroyed when no longer needed for the purposes for which it was provided; and the university enters into a written agreement with the organization that specifies the purpose, scope and duration of the study and the information to be disclosed, requires the organization to use personally identifiable information from education records only to meet the purpose(s) of the study as stated in the written agreement; and requires the organization to conduct the study in a manner that does not permit personal identification of parents and students to anyone other than representatives of the organization with legitimate interests, and requires the organization to destroy or return all personally identifiable information within a specified time period when it is no longer needed for the purposes for which the study was conducted.

(7) Accrediting organizations to carry out accreditation functions.

(8) Persons or entities designated by a judicial order or lawfully issued subpoena, upon the condition that the university makes a reasonable effort to notify the student of all such orders or subpoenas and of its intent to release records in advance of compliance with the order or subpoena, unless:

(a) It is a federal grand jury subpoena and the court has ordered that the existence or the contents of the subpoena or the information furnished in response to the subpoena not be disclosed;
(b) A subpoena issued for a law enforcement purpose and the court or other issuing agency has ordered that the existence or the contents of the subpoena or the information furnished in response not be disclosed; or
(c) An ex parte court order obtained by the United States Attorney General (or designee not lower than an Assistant Attorney General) concerning investigations or prosecutions of an offense listed in 18 U.S.C. 2332b (g)(5)(B) or an act of domestic or international terrorism as defined in 18 U.S.C. 2331.

(9) Appropriate persons, including parents of an eligible student, in connection with an emergency if the knowledge of the information is necessary to protect the health or safety of the student or other individuals.

(10) Persons who request information that is designated as “directory information.”

(11) Victims alleging a crime of violence or a nonforcible sex offense, the final results of a disciplinary proceeding conducted by the university after October 7, 1998, with respect to the alleged crime or offense. Disclosure is permitted regardless of whether the university concluded a violation was committed.

(12) To others, the final results of the disciplinary proceeding when, at its discretion the university believes that disclosure will serve a legitimate educational interest, and determines through a disciplinary proceeding conducted under its student conduct code that the alleged student perpetrator committed a crime of violence or a nonforcible sexual offense that is a violation of the university’s rules or policies with respect to such crime or offense. For purposes of this subsection, “final results” means the name of the student perpetrator, the violation committed, and any sanction imposed by the university on that student. Names of other students involved in the violation, such as a victim or witness, will be released only with the written consent of those students.

(13) Parent of a student of the university regarding the student’s violation of any federal, state, or local law, or of any rule or policy of the university, governing the use of alcohol or controlled substance, if the student is under the age of twenty-one, and the university had determined that the student has committed a disciplinary violation with respect to that use or possession.

(14) When a parent or eligible student initiates legal action against the university or when the university initiates legal action against the parent or eligible student, the university may disclose to the court any education records of the student that are relevant to the legal action.

(15) Students upon providing evidence sufficient to demonstrate that the requesting individual is in fact the student to whom the records relate such as: A driver’s license; a university student identification card; or other photographic identification.

(16) For deceased students, members of the family or other persons with the written approval of the family or representatives of the estate. The request for education records must be accompanied by a copy of the death certificate or obituary. Absent written approval from the family or representative of the estate, only directory information will be disclosed to persons upon request.

(17) The disclosure concerns sex offenders and other offenders required to register under Section 170101 of the Violent Crime Control and Law Enforcement Act of 1994, and the information was provided to the educational agency or institution under 42 U.S.C. 14071 and applicable federal guidelines.

(18) The disclosure involves records or information from which all personally identifiable information has been removed. Annual notification of their rights under FERPA. Institutions must notify students annually of their rights under FERPA. The actual means of notification (special letter or postcard, inclusion in the annual catalog or quarterly class announcement, student handbook, website) is left to the discretion of each institution.

Annual notification of their rights under FERPA. Institutions must notify students annually of their rights under FERPA. The actual means of notification (special letter or postcard, inclusion in the annual catalog or quarterly class announcement, student handbook, website) is left to the discretion of each institution.

FERPA Applies Only to Educational Records

Records covered by FERPA include records

  • Handwritten, printed, electronic, film, stored on disk, or otherwise recorded;
  • Which personally identifies an enrolled student; and,
  • Are maintained by the school or an authorized party, which is shared or accessible to other school officials.

Records not covered by FERPA include
Private notes or sole possession records of university personnel and are not shared with others except a temporary substitute;

  • Law enforcement and campus security records created solely for law enforcement purposes;
  • Medical records;
  • Employment records relating to individuals who are employed by the university (unless employment is contingent upon enrollment);
  • Alumni records (e.g. records created after the individual is no longer a student).

Other Laws Governing Release of Information
If material is exempt from FERPA, then the act merely allows the institution to release the information publicly as allowed by state and other federal laws.  FERPA does not require an institution to release information to anyone except the student, or others as authorized by the student.  Other laws, such as the Student Right-to-Know and Campus Security Act of 1990, may require the release of information to the public.  For public institutions, state open records laws may require the university to release or redact information to the requestor. 

Additional FERPA Information

Address complaints of alleged violations to:

Family Policy Compliance Office (FPCO)
US Department of Education
400 Maryland Avenue, SW
Washington, DC 20202-5920

Per FPCO, complaints must:

  • Be timely submitted, not later than 180 days from the date you learned of the circumstances of the alleged violation
  • Contain specific allegations of fact giving reasonable cause to believe that a violation has occurred, including:
    • Relevant dates, such as the date of a request or a disclosure and the date the student learned of the alleged violation;
    • Names and titles of those school officials and other third parties involved;
    • A specific description of the education record around which the alleged violation occurred;
    • A description of any contact with school officials regarding the matter, including dates and estimated times of telephone calls and/or copies of any correspondence exchanged between the student and the school regarding the matter;
    • The name and address of the school, school district, and superintendent of the district;
    • Any additional evidence that would be helpful in the consideration of the complaint.

For more information regarding accessing, amending or releasing your education records, placing directory restrictions, or other FERPA related questions, please contact Records and Registration .