Your Right to Inspect and Review Your Records

Under 34 C.F.R. § 99.10, an institution must permit a student to inspect and review their education records, and must comply with a request within a reasonable period, and in no case more than 45 days after receiving it.

That is the whole of the core right, and it is worth reading closely for what it does not say.

Inspect and review, not necessarily copy

FERPA guarantees access. It does not, on its face, guarantee copies. An institution must provide copies only where failing to do so would effectively prevent you from exercising the right — the standard example being a student who lives too far away to attend in person.

Institutions may charge a fee for copies, but not a fee for the search and retrieval itself, and not a copying fee that effectively prevents access.

In practice most institutions provide copies routinely. When one refuses, the question is whether in-person review is genuinely available to you.

What can be withheld

• Financial records of your parents. Expressly excluded from the right of access.
• Confidential letters of recommendation where you waived the right of access, and which are used only for the purpose intended.
• Information about other students. Under § 99.12, where a record contains information on more than one student, you may inspect the part relating to you or be informed of it. In practice this produces redaction — and it is the provision behind most heavily redacted investigative files.

Note what is not on that list: institutions frequently withhold documents on grounds that appear nowhere in the regulation — internal deliberations, draft findings, advice from counsel. Some of those have other bases; many are simply policy. Ask which provision is being relied on.

Practical mechanics that decide outcomes

• Put the request in writing and date it. The 45 days run from receipt, and only a written request creates a record of when that was.
• Address it to the right office. Institutions must publish an annual notification under § 99.7 telling you the procedure and where to go. Find it and follow it — a request sent to the wrong office is often treated as never made.
• Ask broadly and specifically at once. A request for “all education records” plus a list of the specific items you actually need is harder to answer narrowly than either alone.
• Ask for the disclosure log. Under § 99.32 institutions must maintain a record of disclosures made from your education records, and that record is itself available to you. It is the single most useful and least requested document in FERPA — it tells you who has been given your information.
• Ask for an explanation. Section 99.10(c) entitles you to a response to reasonable requests for explanations and interpretations of the records.

Timing against a proceeding

Forty-five days is longer than most disciplinary timelines. If a hearing is scheduled inside that window, the FERPA request is not going to produce the file in time on its own.

That is why access to the investigative file in a conduct matter is usually pursued through the institution’s own procedure and, where applicable, the process rights attached to it — with the FERPA request filed in parallel rather than instead. If you have a disability and reviewing a large file quickly is itself a barrier, see accommodations in hearings and disciplinary proceedings.

Common questions

Can the school make me come in person?

It can, unless doing so effectively prevents you from exercising the right.

Can it charge me?

For copies, yes, within limits. For searching and retrieving, no.

What if 45 days pass and nothing happens?

That is a complaint to the Student Privacy Policy Office. See filing a FERPA complaint.

Can I see the investigation file about me?

If it is an education record maintained by the institution, generally yes, subject to redaction of information about other students. Timing is the practical obstacle rather than entitlement.

Get in touch if a records question has become a real problem — a hold you cannot resolve, a disclosure that should not have happened, or a record that is wrong and staying wrong.

General information about federal education privacy law. It is not legal advice, it does not create an attorney-client relationship, and it cannot account for your institution’s own policies or the law of your state, several of which impose obligations beyond FERPA.