Student records and privacy shape how schools handle some of the most personal information a family will ever share, including grades, attendance, health notes, and disciplinary history. Every school keeps these files, and every family has a stake in knowing what is inside them and who can see them.
This article explains what counts as an education record, who may access it, and which rights parents and students hold. It also covers retention, digital systems, and practical habits that protect a child’s information. In the United States the main law is FERPA, and other countries follow their own rules.
What Is Actually in a Student’s File
A student record is far more than a report card. Schools typically hold enrollment forms, contact details, transcripts, attendance logs, test results, teacher notes, and documentation of services such as counseling or special education. Much of this information lives in several separate systems rather than in one folder.
Some records are academic and some are administrative. Academic records show what a student has learned and how it was measured. Administrative records show how the school managed enrollment, safety, health, and conduct. Both kinds can follow a student for years.
The difference matters because different rules and different staff members often apply to each type. A counselor’s working notes, for example, may be handled differently from a final transcript. Knowing the categories helps families ask better questions.
A good first step for any parent is to ask the school office what types of records it keeps about their child and where each type is stored. Most schools can answer this plainly.
Why Privacy Rules Exist in the First Place
Education records can reveal a great deal about a young person, including learning difficulties, family circumstances, health conditions, and past mistakes. If that information circulated freely, it could affect a student’s reputation, opportunities, and sense of safety. Privacy rules exist to prevent that kind of harm.
In the United States, the main federal law is the Family Educational Rights and Privacy Act, known as FERPA. It applies to schools that receive certain federal funding and gives parents and eligible students specific rights over education records.
Other countries use different laws, often as part of broader data protection frameworks. Some give families strong rights to see and correct data, while others focus on limiting how organizations collect it. Readers outside the United States should check their national or regional education authority.
Whatever the legal source, the same ideas appear again and again: access for the family, limits on sharing, and responsibility for the organization that holds the data.
The Core Rights Families Usually Have
Under FERPA, parents hold certain rights over their child’s education records until the student turns 18 or enters a postsecondary institution. At that point the rights generally transfer to the student, who is then called an eligible student.
- The right to inspect and review the education records the school maintains about the student.
- The right to request correction of records the family believes are inaccurate or misleading.
- The right to consent before the school discloses personally identifiable information, with several exceptions written into the law.
- The right to file a complaint with the federal office that oversees FERPA compliance.
These rights are about access and accuracy, not about demanding that a school delete a legitimate grade or disciplinary entry. If a school declines a correction, the family can usually add a statement of disagreement to the record.
Procedures and deadlines differ by school and district. Reading the annual notice of rights that schools provide is the easiest way to learn the local process.
Who Is Allowed to See a Record
Access is not all or nothing. Different people have different levels of permission, and the guiding principle is that only people with a legitimate reason should see a student’s information.
School Officials With a Legitimate Educational Interest
Teachers, counselors, and administrators may see records when they need the information to do their jobs. A teacher generally has no need to read the full discipline history of a student in another class.
Schools are expected to explain in their annual notice who counts as a school official. Access should match the role, not curiosity. If a staff member asks for information outside their role, it is reasonable to question the request.
Outside Parties and Common Exceptions
Disclosure to outsiders usually requires written consent, but the law lists exceptions. Examples include a student transferring to a new school, certain audits and evaluations, health and safety emergencies, and responses to a lawful court order.
Each exception has conditions, and schools are expected to follow them carefully. Families who doubt a disclosure was proper can ask the school to explain it.
Directory Information and the Opt-Out Choice
Schools may designate basic details, such as a student’s name, grade level, or participation in activities, as directory information. This can be shared without consent unless the family opts out.
Typical uses include yearbooks, programs, and honor rolls. Families should read the directory notice each year and decide what they are comfortable with. Opting out is usually done in writing.
Digital Records and the New Privacy Questions
Most schools now store records in online systems, from student information systems to learning platforms and classroom apps. This makes records easier to update and share with families, but it also increases the number of companies and people who may touch the data.
When a school uses a vendor, it remains responsible for protecting the information. Contracts and district policies should limit how a vendor may use student data, and they usually forbid selling it. Families can ask which tools their child’s school uses and what data each one collects.
Everyday habits matter as well. Teachers who email grades from personal accounts, post class lists in public places, or share screens with other students’ names visible can expose information without meaning to.
Strong passwords, limited account access, and staff training are not glamorous, but they prevent most routine privacy slips. Good digital practice is largely about consistent small decisions.
Habits That Protect a Student’s Information
Privacy is not only the school’s job. Families and students can reduce risk through ordinary routines. A few steady habits go a long way, especially once a child begins using online portals and apps.
- Keep portal logins private and use a unique password for each account.
- Read school notices about directory information and technology tools, and respond by the stated deadline.
- Ask before signing up for outside apps that request a student’s school details.
- Store copies of key documents, such as transcripts and immunization records, in a secure place at home.
- Report any suspected data mix-up, such as another student’s information appearing in your child’s account.
Students can take part, too. Older students should understand that screenshots of grades or messages can travel further than intended. A short family conversation about what is private and what is shareable is often more effective than a long list of rules.
Schools generally appreciate prompt reports of errors. A quick, polite message to the office usually leads to a faster fix.
Special Situations Families Often Ask About
Some circumstances raise questions that the basic rules do not answer neatly. Three come up often, and each deserves a clear explanation. Specific answers can differ by state, court order, and school policy, so treat these as general guidance.
Divorced or Separated Parents
In general, both parents keep their rights to see a child’s education records unless a court order or other legal document says otherwise. A school usually needs to see that document before limiting a parent’s access.
Parents with custody questions should give the school copies of any relevant order and keep their contact details current.
Both parents should also ask how the school sends notices.
Health and Counseling Information
School health and counseling notes may fall under education records, and some may also be protected by other laws or professional ethics rules. A counselor’s private working notes are often treated differently from records shared with others.
Families who want to know how a school handles this information should ask for the written policy.
Older students may also ask their counselor to explain how confidentiality works.
Records After Graduation
When a student leaves, the school usually keeps core records such as the transcript. Adult former students can typically request copies, and many schools use a records office or an online service for this.
Policies on fees, identity checks, and processing time differ from place to place, so contact the records office early if a deadline is near, such as a job or college application.
How Long Records Are Kept and What Happens Next
Schools do not keep every document forever. Retention schedules, set by state or national rules and local policy, say how long each type of record must be kept before it can be destroyed. Permanent records, such as final transcripts, are generally kept much longer than routine items.
Destruction should be secure. Paper files need shredding, and electronic files need proper deletion from systems and backups. Leaving old files in an unlocked cabinet is a common and avoidable risk.
Families sometimes want a copy of records before they are due to be destroyed. If your child’s file includes items you may need later, such as evaluation reports or immunization records, ask for copies while the school still has them.
Because retention rules vary, the best source is the school district or the state education authority. A records office can usually tell you the schedule for a particular document.
Common Mistakes and How to Avoid Them
Most privacy problems are not dramatic breaches. They are small errors that repeat. A teacher leaves a gradebook open on a shared computer, an office worker confirms a student’s enrollment to a caller without checking who they are, or a parent posts a photo of a class roster online.
Another frequent mistake is assuming that “everyone knows” a student’s situation. Staff members who are curious but have no need to know should not receive details. Likewise, families should avoid sharing another child’s information from a school notice or group message.
Schools can reduce errors with clear procedures: verify identity before sharing information, log who accesses sensitive files, and train new staff early. Families can help by using the official channels for requests instead of informal hallway conversations.
When a mistake happens, the best response is prompt, honest correction. Fixing the issue, informing those affected where required, and adjusting the process builds more trust than hiding the error.
A Practical Plan for Staying Informed
You do not need legal expertise to protect a student’s privacy. A simple yearly routine covers most needs, and it takes less time than most people expect.
At the start of each school year, read the notice of rights and the directory information form. Ask which apps and platforms your child will use. Request a look at the file once in a while, especially before major transitions such as moving to middle school, high school, or college.
Keep a short folder with the documents you may need, including contact information for the records office. If you spot an error, put the correction request in writing and keep a copy.
If a problem cannot be solved at the school level, contact the district office or your state or national education authority. Knowing who to ask, and doing so calmly, is the most useful privacy skill a family can have.