Download the PDF FEPRA Guide for Faculty and Staff

For information on FERPA Proxy, see the Faculty and Staff Resources page.

Why is FERPA Important?

The Family Educational Rights and Privacy Act (FERPA) is the federal law that protects the privacy of students' education records. All institutions receiving federal aid administered by the Secretary of Education must adhere to FERPA regulations.

Back to the top

What student rights are protected?

The primary student rights protected under FERPA are:

  • The right to review and inspect their education records (within 45 days of receipt of a written request)
  • The right to have their education records amended or corrected
  • The right to control disclosure of certain portions of their education records
  • The right to file a complaint with the U.S. Department of Education regarding alleged failures to comply with FERPA
Back to the top

What are considered education records?

Education records are all records maintained by UTSA about individual students. These records can be in any medium (handwritten, email, print, microfilm, or other formats) maintained by the University.

Public Records...
In accordance with FERPA, UTSA has designated the following categories of information about individual students as public or directory information. This information will be routinely released to any inquirer, unless the student has specifically requested that all or part of the following list be withheld:

  • Name
  • Address and telephone number
  • Email address
  • Place of birth
  • Major field of study
  • Enrollment status
  • Dates of attendance (in person or by correspondence, Internet, or other electronic and telecommunications technologies)
  • Most recent previous educational agency or institution attended
  • Classification
  • Degrees, certificates and awards received
  • Date of graduation
  • Participation in officially recognized activities and sports
  • Physical factors (height and weight) of athletes
  • Photographs

Students wishing to restrict access to some or all public information in their education record must file a Restrict Student Directory Information Request form available on the One Stop Enrollment website: https://onestop.utsa.edu/forms/registrar/.

Research Papers and Theses
The University may disclose research papers and theses authored by the student to interested members of the public.

Private Records...
The following categories of information are considered private, or protected, by UTSA:

  • Social Security Number
  • UTSA student ID Number
  • Residency status
  • Marital status
  • Married name or previous name
  • Parents' name and address
  • Transfer credits
  • Courses completed
  • Grades
  • Grade point average
  • Rank in class
  • Current class schedule
  • Advisor's name
  • Academic status
  • Current disciplinary actions

Private Records may be released only to the following parties:

  • Individual students
  • Dean's Office
  • University academic departments
  • Appropriate school officials who have legitimate educational interests ("school official" means a person either: (1) employed by UTSA in an administrative, supervisory, academic, research, or support staff position, (2) serving on a UTSA governing body, (3) under contract to UTSA to perform a special task or service, or (4) who is a student serving in an official capacity for UTSA)
Back to the top

Prior Written Consent

The University must obtain prior written consent from students before disclosing any personally identifiable information from their education records.

The prior written consent must:

  • Specify the records to be released
  • State the purpose of the disclosure
  • Identify the party(ies) to whom disclosure may be made
  • Be signed and dated by the student
Back to the top

What are not considered education records?

The following are not considered education records:

  • Personal notes of UTSA faculty and staff
  • Employment records (unless employment is contingent on the individual's status as a student)
  • Medical and counseling records used solely for treatment
  • Campus Security records
  • Financial records of a parent or spouse
  • Confidential letters and statements of recommendation placed in the student's record
  • Records that contain only information about an individual obtained after the individual was no longer a student at UTSA
  • Records of applicants for admission who were denied acceptance or chose not to attend
Back to the top

Who can request access to a student's education record?

Under FERPA, prior written consent must be obtained before a student's education record may be disclosed to a third party, unless they are exempted from this provision. Some instances in which prior written consent is not required are:

  • Requests in connection with an emergency, if such information is necessary to protect the health or safety of the student or other person
  • Requests in accordance with a lawful subpoena or court order
  • Requests for "public records" information, if not restricted by the student
  • When the student violates a law or the University's policies governing alcohol or substance abuse, if the student is under the age of 21

For a complete list of groups or individuals to whom information will be released without prior written consent, refer to UTSA Student Policies.

Back to the top

Can students access their education record?

Eligible students must be given access to review and inspect their education records. Requests to access their education records must be made in writing and submitted to the appropriate office. For details on how students can request access to their records, refer to UTSA Student Policies.

Back to the top

FERPA Dos and Don'ts


  • Do use official grade delivery methods; ASAP and WebCT (Canvas)
  • DO review the UTSA HOP 5.1 FERPA policy before responding to a request for education records
  • DO treat information on a computer screen with the same confidentiality as paper copies
  • DO check directory restrictions before you release any directory information about a student (contact the Office of the Registrar)


  • DO NOT release grades to any third parties or parents without prior written consent from the student
  • DO NOT post grades by a full or partial Social Security Number, Banner ID, name or other means that may inadvertently identify the student
  • DO NOT send grades via email as there is no guarantee of confidentiality with electronic transmission
  • DO NOT display or pass around iClicker grades
  • DO NOT leave student information out on your desk or open on your computer
  • DO NOT circulate a printed class roster with names and Banner IDs
  • DO NOT discuss student concerns with anyone but the student
  • DO NOT release any student record information to a third party or parent without checking with the Office of the Registrar or your Dean's office
  • DO NOT allow students to view, read, or record another student's social security number, grades, GPA, academic status, or other private information

Letters of Recommendation

Statements made from personal observation or knowledge do not require a written release from the student. However, if personally identifiable information obtained from a student's education record is included in a letter of recommendation (e.g., grades, GPA, etc.), you are required to obtain a signed release from the student.

Back to the top

Possible Penalties for Violation

The Family Policy Compliance Office of the U.S. Department of Education reviews and investigates complaints of violations of FERPA. Violations may result in sanctions as severe as the withholding of federal funding, including grants and financial aid.

For more information, visit the U.S. Department of Education Web site at http://www2.ed.gov/ferpa/.

Back to the top