FERPA Lawyer for College Students

Last reviewed September 26, 2026

What FERPA actually gives you

The Family Educational Rights and Privacy Act gives eligible students the right to inspect their education records, to seek correction of records that are inaccurate or misleading, and to limit non-consensual disclosure. At a college those rights belong to the student, not the parent — they transfer on enrollment in a postsecondary institution regardless of age. FERPA is codified at 20 U.S.C. § 1232g, with regulations at 34 C.F.R. Part 99.

It is more useful as a records tool than as a claim. FERPA provides no private right to sue; it is enforced through a complaint to the U.S. Department of Education. I use it strategically — to obtain the file the school is relying on and to correct what is wrong in it — rather than as a standalone lawsuit.

Used early, it is the closest thing a student has to discovery before a hearing. Used late, it produces a file after the decision that relied on it. That difference is most of what this page is about.

What actually counts as an education record?

An education record is a record directly related to a student and maintained by the institution or someone acting for it. That is broad: transcripts, disciplinary files, investigative reports, advising notes, and committee materials can all qualify. Format does not matter.

The exclusions matter as much as the definition, because they are where schools push back:

• Sole-possession notes kept as a personal memory aid and not shared
• Records of a law enforcement unit created for a law enforcement purpose
• Employment records, where employment does not depend on student status
• Treatment records made by a physician, psychiatrist, or psychologist for treatment of a student over 18
• Records created after the person is no longer a student, such as alumni records
• Peer-graded work before it is collected and recorded, per Owasso Independent School District No. I-011 v. Falvo, 534 U.S. 426 (2002)

What does the right to inspect get me, and how quickly?

A school must give you the opportunity to inspect and review your education records within forty-five days of the request. The right is to inspect; a school must provide copies only where failing to do so would effectively prevent access, though many provide them anyway when asked in writing.

Two practical points. Put the request in writing, dated, and identify the categories you want rather than asking for “my file,” which invites a narrow production. And ask early: forty-five days is longer than most appeal timelines, and a school that takes the full period has violated nothing.

Can I get the investigation file before my hearing?

Often, and it is worth trying. Investigative reports and committee materials about you are generally education records subject to inspection, and many conduct policies promise access to the evidence before a hearing on a shorter timeline than FERPA requires. Where the policy grants more, use the policy.

Expect redaction. Where a record contains information on more than one student you are entitled to see only the part relating to you. That is a legitimate limit, applied more broadly than it should be, and an over-redacted production is itself a point worth making on the record. See code-of-conduct defense and academic misconduct.

How do I correct something that is wrong in my file?

You ask the school to amend it. If the school refuses, it must tell you of your right to a hearing. If the hearing upholds the record, you may place your own statement in the file commenting on the contested information, and that statement must be kept with the disputed part and disclosed whenever it is.

The limit is often misunderstood. The Department of Education is explicit that the amendment procedure may not be used to challenge a grade, an opinion, or a substantive decision. It reaches records that are inaccurate, misleading, or in violation of privacy rights. Challenging the decision itself is a different process, covered on appeals and court review. The statement-in-the-file remedy is still useful, because it travels with the record.

Can I sue my school for a FERPA violation?

No, and this is the point most often gotten wrong. In Gonzaga University v. Doe, 536 U.S. 273 (2002), the Supreme Court held that FERPA’s nondisclosure provisions create no personal rights enforceable through Section 1983. There is no private right of action and no FERPA damages award.

Enforcement runs through the Department of Education’s Student Privacy Policy Office, which accepts complaints generally within 180 days of the violation or of when you knew or should have known of it. The ultimate sanction is withdrawal of federal funding, which is essentially never imposed, so the practical value is institutional attention rather than a remedy for you. FERPA gets the record; the claims that carry remedies live elsewhere.

What is directory information, and can I turn it off?

Directory information is what a school may disclose without consent because it is not generally considered harmful if released — typically name, address, telephone, email, photograph, dates of attendance, enrollment status, major, degrees and honors, participation in activities and sports, and the most recent school attended. Social Security and student ID numbers are not directory information.

You can opt out, and the school must first give notice of what it treats as directory information and of your right to restrict disclosure. There is usually a deadline each term, and the opt-out has side effects — it can suppress the enrollment verifications and degree confirmations employers request. Worth deciding deliberately, particularly if a matter may attract attention.

When can my school tell other people about my discipline?

FERPA has real carve-outs, and disciplinary matters sit inside several. School officials with a legitimate educational interest may see the file without your consent. So may officials at another institution where you seek to enroll. A school may also disclose in a health or safety emergency.

Two carve-outs surprise students. A postsecondary institution may disclose the final results of a disciplinary proceeding to the alleged victim of a crime of violence or a non-forcible sex offense, whether or not a violation was found — and where the student was found responsible for such an offense, FERPA permits broader disclosure of the limited final results. Separately, a school may notify the parents of a student under twenty-one of a finding that the student violated a law or policy governing alcohol or controlled substances. See alcohol and drug allegations and Title IX.

What can a student defense lawyer do here?

• Drafting a records request that produces the whole file rather than a summary
• Requesting and reviewing the complete education record before a hearing
• Testing over-broad redactions and pressing for the material actually relied on
• Seeking amendment of inaccurate or misleading records, and the hearing that follows a denial
• Drafting the statement placed in the file where amendment is refused
• Addressing improper disclosures of student information
• Advising on directory-information opt-outs and their consequences
• Integrating the records strategy into the underlying disciplinary or academic matter

Why timing matters

Forty-five days is the school’s deadline to produce records, and most conduct and appeal windows are shorter. A request made the day the notice arrives may still land after the hearing; one made three weeks later will certainly land after the appeal. The record is also what a court later looks at, so obtaining and correcting it while the process is open preserves your options rather than documenting their loss. Related: discrimination, harassment and retaliation.

Records problems often surface as a hold rather than a refusal: the transcript is not denied, it simply will not release. That is a separate fight with its own leverage — see transcript holds, registration blocks and record corrections.

Common questions about FERPA and education records

Can I sue my school for violating FERPA?

No. In Gonzaga University v. Doe, 536 U.S. 273 (2002), the Supreme Court held that FERPA creates no personal rights enforceable through Section 1983, and there is no private right of action. The remedy is a complaint to the Department of Education’s Student Privacy Policy Office, generally within 180 days, whose ultimate sanction is loss of federal funding.

How long does my school have to give me my records?

Forty-five days from the request. That is the outer limit, not a target, and it is longer than most disciplinary and appeal timelines — which is why the request should go out the day you learn of a proceeding. Many schools produce faster when the request is specific and in writing.

Can I use FERPA to change a grade?

No. The Department of Education is explicit that the amendment procedure may not be used to challenge a grade, an opinion, or a substantive decision. It applies to records that are inaccurate, misleading, or in violation of privacy rights. A grade is challenged through the school’s grade appeal process, which is a separate route with its own deadline.

Are my disciplinary records covered by FERPA?

Generally yes, disciplinary files are education records. But several exceptions apply specifically to discipline: disclosure of final results to the victim of an alleged crime of violence or non-forcible sex offense, notification to parents of students under twenty-one about alcohol or drug findings, and disclosure to school officials with a legitimate educational interest.

Can my parents see my college records?

Not automatically. At a postsecondary institution the rights belong to the student regardless of age, so a school generally needs your written consent. There are exceptions, including for students who are dependents for tax purposes and for alcohol and drug findings involving students under twenty-one. Most schools provide a consent form.

What if the school says a document is not an education record?

Ask which exclusion it is relying on. The common answers are sole-possession notes, law enforcement unit records, or treatment records, and each has conditions the school must meet — notes shared with a committee are no longer sole-possession. Get the answer in writing, because it becomes part of the record either way.

Where to go from here

• FERPA and your education records — what is in your file, who may see it, how to get a copy, and how to correct what it says.
• Records and status — transcript holds, registration blocks, degree revocation, rescinded admission, leave of absence, and SEVIS.