FERPA - General Information
- What is FERPA?
- What are education records?
- When do FERPA rights begin?
- Student rights under FERPA
- Access to student education records
- When can records be released without student consent?
- OSU directory information
- Restricting the release of directory information - the "Buckley flag"
- Location of education records
- Parental access to student education records
- Requesting student record information
- Annual notification to students
- More information about FERPA
- Comments/Questions
- FERPA Home
FERPA is the Family Educational Rights and Privacy Act of 1974. The essence of FERPA is to give a student the right to inspect his or her education records and to protect the privacy of these records. The statute applies to any educational agency or institution that receives funding under any program administered by the Secretary of Education.
Education records are defined as records which contain information directly related to a student and are maintained by an educational institution or by a party acting for the institution. Examples are enrollment and grade records, applications for university scholarships, financial aid records, bursar records and information contained in the student information system.
Education records do NOT include: sole possession documents (such as personal notes or “memory joggers” created and maintained by individual faculty/staff); law enforcement records; employment records where employment is not tied to student status; medical records; and records containing information about an individual that are created after he/she is no longer a student at that institution (i.e., alumni records).
A student’s FERPA rights begin with his or her registered attendance at OSU. Attendance need not be physical, such as in cases of correspondence and distance learning courses. Applicants who are denied admission or who are admitted but never attend are not covered under FERPA. There is no end point for FERPA rights—as long as the student is living.
Right to Inspect/Review
A student has a right to inspect and review any education record to which he or she is permitted under this policy. Education records are maintained in a number of University offices. Requests to review records must be made in writing to the responsible official of each office which maintains the records who shall comply with the request within 45 days upon receipt.
The University reserves the right to refuse to permit a student to inspect the following records:
- Records that contain information on more than one student. A student may inspect only that information which relates to him/her.
- Financial records of the student’s parents.
- Confidential letters and statements of recommendation for which the student has waived his or her right of inspection and review.
- Records connected with an application to attend the University or a component unit of the University if that application was denied.
- Those records which are excluded from the FERPA definition of education records.
Right to Challenge the Content of Education Records
A student who wishes to challenge the content of the educational record may do so by submitting a written request to the official responsible for maintaining the record, with such request specifying the content being challenged, the grounds for the challenge, and the exact action being sought. If the official grants the request, the change(s) will be made. If the request is denied, the student will be informed and will be given the opportunity to add an explanation to the record and/or appeal the official’s decision. See OSU Policy 2-0701 for details.
Right to Have Some Control Over the Disclosure of Information from Education Records
This includes the student’s right to prevent the disclosure of directory information.
Right to File a Complaint
Students have the right to file a complaint with the U.S. Department of Education if the student believes that the University has failed to comply with the requirements of FERPA. The complaint must be made within 180 days of when the infraction was discovered, and there must be sufficient evidence to prove the violation. The written complaint should be sent to: Family Policy Compliance Office, U.S. Department of Education, 400 Maryland Avenue, SW, Washington, D.C. 20202-5920.
Access to Student Education Records
FERPA protects the privacy of education records. School officials may not disclose personally identifiable information about students or permit inspection of their records without written permission from the student, unless such action is covered by certain exceptions permitted by FERPA.
Examples of record release with written permission from students are:
- Request to send a transcript to a third party (through the Registrar’s Office)
- One-Time Authorization to Release Educational Information (Registrar)
- Proxy access that the student grants in Self-Service (my.okstate.edu)
When can Records be Released Without Student Consent?
Directory information may be released without the written consent of the student, unless the student has filed a Request to Withhold Directory Information. An institution may not disclose or confirm directory information without the student’s written consent if the student’s social security number or other non-directory information is used alone or combined with other data elements to identify the student.
Prior consent is not required to disclose personally identifiable information:
- To “school officials” who have a “legitimate educational interest” in the student. “School official” is defined as an individual currently serving as a member of the Board of Regents for the Oklahoma Agricultural and Mechanical Colleges; the President of OSU and the administrators, faculty and staff they supervise; the President and CEO of the Alumni Association and President and CEO of the Oklahoma State University Foundation and the staff they supervise; the National Student Clearinghouse; and contractors, volunteers, and other non-employees performing institutional functions as school officials with legitimate educational interests. In general, a school official has a “legitimate educational interest” if the official needs to review an education record in order to fulfill his or her professional responsibility to the University. Records should be used only in the context of official educational business.
- To another institution to which a student seeks or intends to enroll or is already enrolled if the disclosure is related to the student's enrollment or transfer.
- To federal, state, and local authorities involving an audit or evaluation of compliance with education programs.
- In connection with financial aid (such as the administration or continuation of aid).
- To individuals or organizations conducting studies for or on behalf of an educational institution.
- To regional or professional accreditation organizations.
- To parents of a dependent student, if the parent has provided to the Registrar’s Office evidence that they declare the student as a dependent on their most recent Federal Income Tax form (Form 1040).
- In response to a lawfully issued court order or subpoena (normally handled by the Registrar, Bursar, other official record custodian and/or Legal Counsel)
- In the event that the release of information is necessary to protect the health or safety of the student or other individuals.
- If the disclosure is the result of a disciplinary hearing where the student is found responsible for a crime of violence or a non-forcible sex offense. Under this exception, information may be released to anyone, including the media. No information on the victim or witnesses may be released.
- To parents of a student under the age of 21 who has committed a drug or alcohol related offense.
The following items are considered “directory information” at OSU. Directory information may be released without the written consent of the student, unless the student has filed a Request to Withhold Directory Information. An institution may not disclose or confirm directory information without the student’s written consent if the student’s social security number or other non-directory information is used alone or combined with other data elements to identify the student.
- student's name (including chosen or preferred first name)
- local and permanent addresses or hometown
- institutional electronic mail address
- telephone number
- year of birth
- major field of study
- dates of attendance at Oklahoma State University
- degrees, honors, and awards granted or received and dates granted or received
- academic classification such as freshman, sophomore, junior or senior, etc.
- most recent educational institution previously attended
- dissertation or thesis title
- advisor or thesis/dissertation advisor
- participation in officially recognized organizations, activities, sports, and weight and height of student participating in officially recognized sports
- parents' names and addresses (city and state only)
Restricting the release of directory information - the "Buckley Flag"
Students may complete and submit to the Office of the Registrar a Request to Withhold Directory Information (Buckley Form). Students should consider all aspects of a directory information hold prior to filing such a request. This request will prevent Oklahoma State University from releasing any directory information, and any requests for such information from non-institutional persons or organizations will be refused (i.e., your name will not appear in the commencement program, we will not be able to confirm your degree to a prospective employer, your name will not be provided to honor societies that wish to invite you to join, etc.). Requests for non-disclosure that were made while a student was in attendance continue to be honored, even after the student leaves the University, unless the request is revoked by the student (or former student). To revoke a directory hold (or Buckley flag), students may complete and submit a Revocation of Request to Withhold Directory Information (Buckley Revocation Form). A student with a directory hold may request a one-time exception to allow OSU to publish his/her name in the OSU Commencement Program Book by submitting a One-Time Directory Hold Exception for Commencement Program form on or before the diploma application deadline.
The Office of the Registrar is the official office of the University for maintaining and releasing information pertaining to students’ academic records. Additional academic records exist in other campus offices, such as college advising offices, the Graduate College, the Center for Veterinary Health Sciences, and faculty offices. The Office of Student Judicial Affairs is the official office of the University for maintaining and releasing information pertaining to students’ discipline records. Career Services is the official office of the University for collecting and releasing information furnished or authorized by students for the purpose of seeking employment. Billing information is maintained by the Office of the Bursar, and financial aid information is maintained by the Office of Scholarships and Financial Aid.
Parental Access to Student Education Records
At the elementary and secondary school level, FERPA gives parents the right to access education records. When a student reaches 18 years of age or is attending an institution of post-secondary education, FERPA rights transfer from parent to student. Therefore, at the postsecondary level, parents have no inherent rights to inspect their son’s or daughter’s education records.
Information regarding education records is best obtained by direct communication between the parent and the student. If desired, students may grant view-only record access to parents or other third parties using the Proxy tab in Self-Service. See the Proxy Access website for more information. Students may also setup a guest login to Bursar billing information at the web site: https://bursar.okstate.edu/.
Parents of a dependent student may challenge denial of access to educational records by providing to the Registrar’s Office evidence that they declare the student as a dependent on their most recent Federal Income Tax form (Form 1040).
Requesting Student Record Information
Students may request official transcripts from the Office of the Registrar. University officials may request student record information at https://apps.okstate.edu/data_release/index.php. All requests for student record information from entities outside of OSU should be made through the Brand Management Open Records Request website.
Annual Notification to Students
Students are notified annually of their FERPA rights in the OSU Catalog (Registrar section) and the Daily O'Collegian. In addition, the notification is referenced in an email from the Office of the Registrar at the start of each term and in the online enrollment guides published shortly after the start of each fall and spring semester.
- U.S. Department of Education: Protecting Student Privacy
- AACRAO FERPA Guide
- Link to the full act
- OSU’s FERPA Policy (2-0701)
- FERPA Presentation by Scott Fern, OSU Board of Regents Legal Counsel (OSU faculty/staff O-Key login required)
General questions may be directed to the Office of the Registrar or any other office that serves as an official custodian of student records. Comments or suggestions about this website should be addressed to the Office of the Registrar, 322 Student Union, Stillwater, OK 74078, 405-744-6876 or email: registrar@okstate.edu.