CIPP/US Study Guide
Chapter 10: Education Privacy

When Disclosure of Education Records Is Permitted

FERPA permits disclosure of education records only if the data is not PII, it is unblocked directory information, the rights holder consents, the disclosure goes to the rights holder, or a statutory exception applies. Nondirectory data like GPA, grades, or transcripts cannot be released without valid consent.

  • The information is not personally identifiable
  • The information is directory information the student has not blocked
  • Consent has been provided by the holder of the FERPA rights
  • The disclosure is made to the holder of the FERPA rights
  • A statutory exception applies, such as for health or safety purposes
Grades and transcripts need consent

Nondirectory information such as GPA, grades, or transcripts may not be released without valid consent, even though it is PII. PII can still be disclosed if it qualifies as unblocked directory information.