Explore your rights and responsibilities under FERPA. Our FERPA Annual Notice outlines how your education records are protected and actions you can take to manage them.
Understanding FERPA
As a student, your rights under FERPA begin when you turn 18 years old or enroll at a post-secondary institution, such as a college or university, at any age. FERPA defines what qualifies as an education record, what may be considered directory information and how access is determined. The definitions below outline your rights as the owner, the university’s role in safely managing your record and what can — and cannot — be shared.
Your rights under FERPA include:
- The right to review your education records
- The right to request a change to your education records
- The right to provide written consent before information identifying you is shared (except when FERPA allows without consent)
- The right to file a complaint if you believe your FERPA rights have been violated
Education Records
Educational records include any information, regardless of format or medium, related to you and maintained by the university. This includes transcripts or other records from schools you were previously enrolled.
Education records don’t include:
- Records or private notes held by university officials kept solely for personal use (such as private advising notes)
- Law enforcement or campus security records maintained by those units
- Employment records (unless the job is tied to your student status, like work study or graduate teaching associate)
- Medical records
- Records created after you’re no longer a student (such as alumni records)
- Grades on peer-graded papers that haven’t been collected and recorded
Directory Information
Directory information is any record information not considered harmful or an invasion of privacy that can be made public without written consent, if you haven’t requested it be restricted. You have the right to request to restrict the release of any directory information, except to university officials with a legitimate educational.
Directory information is determined individually by the institution. At Purdue, this includes your:
- Name
- E-mail address
- Local and home address
- Local and home phone number
- Major and field of study
- Enrollment status and credit hour load (for example: undergraduate or graduate, full-time or part-time)
- Dates of attendance
- Degrees, honors and awards received
- Participation in officially recognized activities and sports
- Position, weight, height and photograph of student athletes
Directory information cannot include: race, gender, social security number, grades, GPA, country of citizenship or religion.
Indiana Social Security Number Law
Indiana Social Security Number (SSN) Law also known as Indiana Code 4-1-10 is a state law that protects SSNs from improper use and public disclosure.
In general, the law:
- Prohibits public agencies from disclosing an individual’s SSN to the public
- Restricts how SSNs may be displayed, transmitted or used
- Requires reasonable safeguards to protect SSNs from unauthorized access
- Limits printing SSNs on mailed materials or publicly accessible documents
This means Purdue can’t use SSNs for public identification and must carefully protect in systems, communications and records. Internal use of SSNs for the purpose of conducting normal business is still permitted under the Indiana law. Purdue data handling guidelines address the usage and methods of exchanging sensitive and restricted data, including SSNs.