The Family Educational Rights and Privacy Act of 1974 (FERPA) is a federal law that governs how we protect and disclose student educational records. As a recipient of federal funding, CU Boulder is obligated to comply with FERPA.

At CU Boulder, FERPA protections go into effect on the first day of classes of the student's first term of enrollment.

High-Level Guidelines

  • Never use student names, SSNs, student IDs, photos or other personally identifiable information when posting class or grade rosters, regardless of medium.
  • Ensure learning management and other systems do not display sensitive information to others.
  • Do not maintain student grades with personally identifiable information on public computers, websites or personal laptops. (Questions about appropriate storage and technologies may be directed to听IT Security听or the Office of the Registrar.)
  • Never leave student papers, exams or files on desks/desktops when away from the office.
  • Securely dispose of documents and files containing sensitive information.
  • Unless you know the student, always confirm their identity by asking for a photo ID before discussing听nondirectory information;听you may also use their听security passphrase听or ID photo (accessible through Campus Solutions and听).
  • Confirm the student hasn't restricted release of their directory information听before you disclose it.
  • Request a release prior to drafting a student letter of recommendation.
  • Never provide class schedules to unauthorized third parties for purposes of locating a student.
  • Before disclosing student record information to a parent or other third-party, refer to our third-party policies and procedures.

FERPA Guidelines for Faculty & Staff

FERPA Training

To assist university faculty and staff in understanding FERPA and its impact on their professional responsibilities, our office has developed two online FERPA tutorials.

Reporting FERPA Violations

If you realize that a FERPA violation has occurred,听contact the Office of the Registrar immediately. We can help determine how to proceed and what notifications may be necessary.