Access To Student Information Family Educational Rights and Privacy Act (FERPA) Policy Revised

The University at Buffalo is committed to protecting the confidentiality of student educational records in accordance with the Family Educational Rights and Privacy Act of 1974 (FERPA).

FERPA gives students the right to:

• Inspect and review their own educational records
• Control the disclosure of information contained in their educational records, except to the extent that FERPA authorizes disclosure without consent
• Request the amendment of their educational records if they believe the records are inaccurate, misleading, or in violation of their privacy rights under FERPA, and if necessary, to have a hearing on this issue
• File a complaint with the United States federal government concerning alleged failures by the university to comply with FERPA requirements

Full review. Updated the policy to:

• Clarify procedures for inspection and review of educational records, including a requirement to verify student identity and identification of records not subject to inspection.
• Establish a Registrar-managed process for students to provide consent for disclosure of educational records to designated individuals or third parties.
• Expand and clarify the categories of parties to whom personally identifiable information may be disclosed without student consent.
• Add a requirement to maintain records of disclosures and create a mechanism for reporting FERPA compliance concerns.
• Update definitions, including Attendance, Educational Records, Directory Information, and Student.
• Add and clarify responsibilities for data custodians, faculty and staff, the Information Security Office, University Counsel, students, Office of Institutional Analysis, and the Office of the Registrar.
• Transfer responsibility for student requests to inspect or amend educational records from Student Conduct to the Office of the Registrar.

This policy applies to all current and former students, and all individuals with access to educational records maintained by the university and the protected rights of students regarding the release of such records. This policy applies to educational records as defined in the Definitions section of this policy.