Another tip in a series provided by the Offices of Information Systems & Computing and Audit, Compliance & Privacy

As we begin the new academic year, it’s important to know about FERPA, the Family Educational Rights and Privacy Act.  FERPA is a federal law that provides certain rights to students and imposes certain obligations on University faculty and staff regarding the privacy of “education records,” or student record information, including limitations on sharing information with parents and guardians.

At Penn, FERPA’s requirements are incorporated in our Policy on the Confidentiality of Student Records: http://www.upenn.edu/almanac/volumes/v56/n25/confidentiality.html  The policy states in general that University faculty and staff may not disclose personally identifiable information from a student’s records except with the student’s written consent.

One important exception allows for sharing with school officials with “legitimate educational interests”—in other words, where the information would be helpful in the performance of official duties. This allows Penn faculty and staff to access the student information they need to perform their jobs.

In general, you may not share student records with parents or guardians. There are some exceptions, including when there is a health or safety emergency, in which case you must work with VPUL and your Dean’s office before contacting a parent. Disclosure is also allowed if the student has provided written consent.  Students may also set their privacy choices electronically within Penn InTouch, under Profile, Privacy & Emergency, and Share Academic/Financial Information.

For more information, visit the FERPA page of Penn’s Privacy website’s (www.upenn.edu/privacy) and check out the FAQs for Faculty & Staff.  Questions about student privacy can be addressed to privacy@upenn.edu

For additional tips, see the One Step Ahead link on the Information Security website: www.upenn.edu/computing/security/