Skip to Search Skip to Global Navigation Skip to Local Navigation Skip to Content
Handbook of Operating Procedures
Chapter 5 - Students
Previous Publication Date: September 10, 2020
Publication Date: December 18 2020
Policy Reviewed Date: November 2, 2023
Policy Owner: VP for Academic Affairs

5.01 Student Rights under the Family Educational Rights and Privacy Act (FERPA)


It is the policy of The University of Texas at San Antonio (UTSA or University) to protect the privacy and records access rights that apply to records maintained by or for the University about its current and former students by complying with the Family Educational Rights and Privacy Act (FERPA) at all times.


This policy provides guidance for compliance with FERPA.


This policy applies to all UTSA faculty, staff, and students and anyone with whom the University has contracted that has access to or possession, custody or control of FERPA protected information.



UTSA or UT System Policies or the Board of Regents' Rules & Regulations

  1. UT System Board of Regents’ Rule 50702, Confidentiality and Security of Education Records Subject to the Family Educational Rights and Privacy Act (FERPA)
  2. UT System Board of Regents’ Rule 10101, Board Authority and Duties
  3. UT System Board of Regents’ Rule 20201, Presidents
  4. UT System Administration Policy UTS183, Maintenance of Education Records Subject to the Family Educational Rights and Privacy Act (FERPA)

Other Policies & Standards

  1. Family Educational Rights and Privacy Act: 20 U.S.C. 1232g
  2. 34 Code of Federal Regulations Part 99 – Family Educational Rights and Privacy


If you have any questions about HOP policy 5.01, Student Rights under the Family Educational Rights and Privacy Act (FERPA), contact the following office:

Office of the Registrar


Annual Notice: Notices that the University shall provide to each Student in attendance at the University at least annually detailing their rights pursuant to FERPA, the procedures for exercising their rights, information about the Directory Information Exception, and the process by which a Student may elect to opt out of the release of the Student’s Directory Information under that exception.
Consent: Permission to disclose certain specified information that is protected by FERPA.  Consent can be written or electronic and must be signed by the Student or otherwise verified by the Student if electronic, that is dated and specifies the specific records to be disclosed, the party to whom the records are to be disclosed, and the purpose of the disclosure.

De-identified Record: Education Record that has been stripped of all identifiers and/or aggregated such that it is not possible to re-identify an individual who is the subject of the record.  An Education Record that has been de-identified is no longer an Education Record and is not subject to this policy nor to FERPA.

Directory Information: Information in a Student's Education Record that would not generally be considered harmful or an invasion of privacy if disclosed. The following information about a Student has been designated by UTSA as Directory Information: 

  1. name;
  2. local and permanent postal addresses;
  3. email address;
  4. telephone number;
  5. place of birth;
  6. field of study; dates of attendance; date of graduation;
  7. enrollment status;
  8. student classification (example: freshman, first year law school student);
  9. degrees awarded;
  10. certificates and awards (including scholarships) received;
  11. photographs;
  12. participation in officially recognized activities and sports;
  13. weight and height of members of athletic teams; and
  14. most recent previous educational agency or institution attended.

Education Records: Records directly related to a Student that are maintained by or on behalf of the University. Education Records do NOT include:

  1. Records of instructional, administrative, and educational personnel that are: in the sole possession of the maker (e.g., file notes of conversations);  used only as a personal memory aid; and are not accessible or revealed to any individual except a temporary substitute;
  2. Law enforcement records of the University campus police;
  3. Medical records and mental health records, including counseling records created, maintained, and used only in connection with provision of medical treatment or mental health treatment or counseling to the Student, that are not disclosed to anyone other than the treatment facility;
  4. Employment records unrelated to the Student's status as a Student;
  5. Alumni records; or
  6. Thesis, Dissertations and Research papers.

Personally Identifiable Information: Information obtained from or contained in an Education Record that can be used to identify a Student to whom the record relates or another Student. It specifically includes information determined by the University to be:

  1. Linked or linkable to a specific Student such that it would allow a reasonable person in the University community who does not have personal knowledge of the relevant circumstances, to identify the Student with reasonable certainty; or
  2. Requested by a person who the University reasonably believes knows the identity of the Student to whom the Education Record relates.

Unless the context of this policy indicates otherwise, a reference to an Education Record includes Personally Identifiable Information contained in or obtained from an Education Record.
Student: An individual, regardless of age, who is or who has been in attendance at the University. It does not include persons who have been admitted but did not attend to the University. For the purposes of this policy "attendance" includes attendance in person, or by correspondence or on-line or distance learning and the period during which a person is working in a position that requires student status, such as under a work-study program position.

University Official with a Legitimate Educational Interest: Any person employed by the University in an administrative, supervisory, academic, or support staff position, including law enforcement unit and health staff; a person or company with whom the University has an affiliation or contract (such as a UT System attorney or auditor, or a clinical facility where a student is participating in an internship); the University of Texas System Board of Regents; a person employed by System Administration; or a person assisting another University Official in performing tasks (such as a volunteer or committee member), if that person or contractor requires access to an Education Record in order to fulfill official responsibilities on behalf of the University.


UTSA faculty, staff, and students shall not disclose to a third party Education Records or Personally Identifiable Information from an Education Record without prior Consent of the Student, except as authorized by FERPA and this policy.


  1. General - FERPA and its associated regulations provide Students with the following rights with respect to their Education Records:
    1. To inspect and review the Student’s Education Records;
    2. To consent to disclosure of the Student's Education Records to third parties, except to the extent that FERPA authorizes disclosure without Consent;
    3. To request amendment of the Student's Education Records to ensure that they are not inaccurate or misleading, or otherwise in violation of the Student’s privacy rights under FERPA;
    4. To be notified of the Student's privacy rights under FERPA; and
    5. To file a complaint with the U.S. Department of Education concerning alleged failures by the University to comply with the requirements of FERPA.
  2. Notice of Rights under FERPA - The University shall provide Annual Notice to each Student of rights under FERPA and this policy at least annually by publishing the Annual Notice of Student Rights under FERPA and Notice Concerning Directory Information, in the University Student Policies.
  3. Consent Requirements for Access to Education Records by Third Parties
    1. Generally Required for Disclosures of Education Records. The University will not disclose Education Records or Personally Identifiable Information from an Education Record without prior Consent of the Student to a third party, except as authorized by FERPA and this policy.
    2. Exceptions to the Consent Requirement. The University, pursuant to FERPA, may release Education Records without the Student's Consent as follows:
      1. Directory Information. Directory Information may appear in public documents and may otherwise be disclosed without Student Consent unless a Student submits a written request to the Office of the Registrar during the first twelve (12) days of class of a fall or spring semester, the first four (4) class days of a summer semester, or the first three (3) days of any quarter to withhold such information from disclosure, as applicable or as otherwise designated by the University in the Annual Notice. The Annual Notice of Student Rights under FERPA and Notice Concerning Directory Information required by Section IX.B. shall provide specific information for Students wishing to exercise their right to have Directory Information about them withheld from release by UTSA.  Upon graduation or termination of a Student’s enrollment for any reason, the release of the Student’s Directory Information will be governed by the Student’s Directory Information status in place during the Student’s last period of enrollment, unless the former Student changes that status.
      2. University Officials with a Legitimate Educational Interest in an Education Record are allowed access to that Education Record. Inter-institutional disclosures may be made between institutions that administer or participate in joint programs or activities, in accordance with Legitimate Educational Interest criteria. For example, an Education Record about a Student concurrently enrolled in the University and another institution, or who receives services from the University (such as the provision of a distance education class) and from another institution may be disclosed by the University to the other institution under this subsection. This includes services provided by the University and institutions participating in distance education classes.
      3. Other Institutions. The University may release a Student's Education Records to officials of other educational institutions in which that Student seeks or intends to enroll or is enrolled.
      4. Audit or Evaluation of Federal or State education programs.  The University of Texas System Board of Regents, authorized representatives of the Comptroller General of the United States, the Attorney General of the United States, the United States Secretary of Education and state and local educational authorities who are authorized by law to audit and evaluate a Federal or State supported education program, or to enforce Federal law which relates to such education programs, or their authorized representatives may access an Education Record as required for the audit, evaluation or enforcement purposes.
      5. Financial Aid. The University may release an Education Record to persons or organizations in connection with that Student's application for, or receipt of, financial aid to the extent necessary for such purposes as determining eligibility, amount, conditions, and enforcement of terms or conditions of such financial aid.
      6. State and Local Officials Pursuant to Statutes Concerning Juvenile Justice. The University may release Education Records to state and local officials that are authorized by statute to access Student Education Records to efficiently serve the Student.
      7. Organizations Conducting Studies. Organizations conducting studies for, or on behalf of the University, for the purpose of developing, validating, or administering predictive administering student aid programs, and improving instruction, may access Education Records for such studies provided that the study is conducted in a manner which will not permit the personal identification of Students and/or their parents by individuals other than representatives of the organization; and the information will be destroyed when no longer needed for the purposes for which the study was conducted. The term "organizations" includes, but is not limited to, Federal, State, and local agencies, and independent organizations.
      8. Accrediting Organizations. Accrediting organizations may access an Education Record required to carry out their accrediting functions.
      9. Parents of a Tax Dependent. A parent of a Student who is a dependent for federal tax purposes, as defined by Section 152 "Dependent Defined," of the Internal Revenue Code of 1954, may access the Student's Education Records. Parents may demonstrate the tax dependency of a Student only by submitting to the University a copy of their most recently filed federal income tax return.  Alternatively, a Student may demonstrate tax dependency, and thus allow parental access to the Student's records without prior consent of the Student, by submitting a signed statement of their tax dependency to the University.  If a tax dependent Student's parents are divorced, both parents may have access to the Student's Education Records, so long as at least one parent is designated by the Student.
      10. Judicial Order or Subpoena. Information concerning a Student shall be released in response to a judicial order or lawfully issued subpoena. However, the University must make reasonable efforts to notify the Student of an order or subpoena before complying with it, except that the University shall not notify a student of a subpoena if it is from a Federal Grand Jury or is for law enforcement purposes, and the subpoena or order provides that the University shall not disclose to any person the existence or contents of the subpoena or any information furnished in response to the subpoena. In addition, Education Records may be disclosed to the U.S. Attorney General or designee in response to an ex parte order concerning an authorized investigation or prosecution of domestic or international terrorism, without prior notice to the Student.
      11. Health and Safety. The University may disclose student information deemed by the University as appropriate to persons in connection with an emergency in order to protect the health and safety of the Student or other individuals.
      12. Disciplinary Hearing Results.
        1. Disclosure to Victims. Upon receiving a written request, the University may disclose to an alleged victim of any crime of violence or a non-forcible sex offense (as those terms are defined in 34 C.F.R. 99.39), the final results of any disciplinary proceeding conducted by the University against the alleged perpetrator of such crime or offense with respect to such crime or offense, regardless of whether the alleged perpetrator was found responsible for violating the University's rules or policies with respect to such crime or offense. If the alleged victim is deceased at the time of disclosure, the disposition of records is a matter of state laws regarding distribution of a decedent's property and either the next of kin or the estate of the deceased victim shall be treated as the alleged victim for purpose of this paragraph.
        2. Disclosure to Third Parties. The University may disclose the final results of any disciplinary proceeding against a Student who is an alleged perpetrator of any crime of violence or non-forcible sex offense (as those terms are defined in 34 C.F.R. 99.39), if the Student is found responsible for violating the University's rules or policies with respect to such crime or offense. Such disclosure shall include only the name of the Student, the violation committed, and any sanction imposed by the University on that Student. Such disclosure may include the name of any other Student, such as a victim or witness, only with the written Consent of that other Student.
        3. Alcohol and Drug Violations. The University may disclose to a parent or legal guardian of a Student, information regarding any violation of any Federal, State, or local law, or of any rule or policy of the University, governing the use or possession of alcohol or a controlled substance, regardless of whether that information is contained in the Student's Education Records, if the Student is under the age of 21 at the time of disclosure to the parent, and the University determines that the Student is responsible for a disciplinary violation with respect to such use or possession.
      13. Defense of Litigation or Complaints against the University. If a Student initiates legal action against the University, the University may disclose to the court or agency with jurisdiction over the complaint, without a court order or subpoena, the Student's Education Records that are relevant for the University to defend itself.
      14. Status as a Registered Sex Offender. The University may disclose information concerning a Student’s status as a sex offender or other individual required to register under section 170101 of the Violent Crime Control and Law Enforcement Act of 1994, 42 U.S.C. 14071, and the information was provided to the University under 42 U.S.C. 14071 and applicable Federal guidelines.
    3. Consent of the Student. The University will release Education Records to, or allow access to those records by, a third party if the Student provides a valid Consent that is capable of verification that it was provided by the Student and names the third party as the person to whom the Education Records may be disclosed.
  4. Disclosure to the Student
    1. A Student has the right, upon request to review all materials that are in the Student’s Education Records, except:
      1. Financial information submitted by the Student’s parents;
      2. Confidential letters and recommendations associated with admissions, employment or job placement, or honors, to which the student has waived rights of inspection and review or which were made part of the Student’s Education Records prior to January 1, 1975, provided those letters were collected under established policies of confidentiality and were used only for the purposes for which they were collected;
      3. Education Records containing information about more than one Student, in which case the University will permit access only to that part of the Record that pertains to the inquiring Student; and
      4. Records that are subject to an attorney-client privilege which belong to the University.
    2. Process for Students Requesting Access to their Education Records: Copies of official transcripts and other official records are available through the Office of the Registrar. Requests for official copies of transcripts or other academic records will not be released for Students who have a delinquent financial obligation or financial "hold" at the University. 
  5. Record of Disclosures - The University will maintain with the Student's Education Records a record for each disclosure request and each disclosure, except disclosures:
    1. To the Student;
    2. Pursuant to the written consent of the Student;
    3. Pursuant to the exception of University Officials with Legitimate Educational Interests;
    4. Pursuant to a law enforcement subpoena and the issuing court or other issuing agency has ordered that the existence or the contents of the subpoena or the information furnished in response to the subpoena not be disclosed or the order is concerning an authorized investigation or prosecution of domestic or international terrorism; or
    5. Of Directory Information.
  6. Requests to Amend Records - A Student who believes that an Education Record maintained about the Student is inaccurate, misleading, or otherwise in violation of the Student’s privacy rights under FERPA, may request amendment of the record. However, substantive judgment of a faculty member about a student’s work, expressed in grades and/or evaluations, is not within the purview of this right.
    1. Informal requests. A Student may request the opportunity to informally discuss amendment of the Record with the University office concerned with the particular Record. If agreement is reached with respect to the Student's request, the appropriate Records will be amended. If the Record is not amended pursuant to the Student's request, the University will inform the Student of its decision and of the Student's right to request a formal hearing.
    2. Requests for a hearing. Requests must be made in writing to the Office of the Registrar, which, within a reasonable period of time after receiving such request, will inform the Student of the date, place, and time of the hearing. The hearing officer that will adjudicate such challenges will be appointed by the President of the University.
    3. A Student may present evidence at the hearing relevant to the issues raised and may be assisted or represented at the hearing by one or more persons of the Student's choice, including attorneys, at the Student's expense.
    4. The decision of the hearing officer will be final, will be based solely on the evidence presented at the hearing, and will consist of a written statement summarizing the evidence and stating the reasons for the decision, and will be delivered to all parties concerned.
    5. If the decision is in favor of the Student, the Education Records will be corrected or amended in accordance with the decision of the hearing officer.
    6. If the decision is unsatisfactory to the Student, the Student may place with the Education Record a statement commenting on the information in the Record or a statement setting forth any reasons for disagreeing with the decisions of the hearing officer, or both. The statement will be maintained as part of the Student's Education Records, and released whenever the Record(s) in question is disclosed.
  7. Complaints - Complaints regarding alleged violations of the rights accorded students by the Federal Family Educational Rights and Privacy Act may be filed with the UTSA Office of Institutional Compliance & Risk Services online at Compliance Hotline Form or calling toll-free 24-hours a day, seven days a week at 210-458-4911.

    Students also have the right to file a complaint with the Student Privacy Policy Office, US Department of Education, 400 Maryland Ave, SW, Washington, D.C. 20203.





XIII. Dates Approved/Amended