5.3 Student Privacy (FERPA), Mandatory Child Abuse Reporting, and Student Records

5.3 Student Privacy (FERPA), Mandatory Child Abuse Reporting, and Student Records

Quick Answer: Student privacy and physical welfare are governed by strict federal statutes and state child protection mandates. Under the Family Educational Rights and Privacy Act (FERPA), parents (and eligible students age 18+) have the right to inspect education records within 45 calendar days and must provide written consent prior to the disclosure of Personally Identifiable Information (PII), unless a statutory exception applies (e.g., legitimate educational interest, school transfer, subpoena, or articulable health and safety emergency). Sole possession memory notes are exempt only if never shared. Child-abuse reporting is governed by state law, which defines covered school personnel, the reporting threshold, channel, deadline, good-faith protection, and penalties. When the applicable threshold is met, report promptly without delaying for a substitute school investigation or confronting a suspected perpetrator; follow the jurisdiction’s safety and notification protocol.

---

The Family Educational Rights and Privacy Act (FERPA)

Enacted in 1974, the Family Educational Rights and Privacy Act (FERPA, 20 U.S.C. § 1232g; 34 CFR Part 99) is a federal privacy statute that applies to all educational agencies and institutions receiving funds under any program administered by the United States Department of Education. Non-compliance jeopardizes all federal educational funding.

Transfer of Rights to "Eligible Students"

• Parental Rights: Under FERPA, rights initially reside with the student's parents or legal guardians, including custodial and non-custodial parents alike (unless a legally binding court order or divorce decree explicitly revokes parental rights).
• The Eligible Student Threshold: When a student reaches 18 years of age OR attends a postsecondary institution at any age, all FERPA rights transfer entirely from the parents to the student (designated an "eligible student").
• High School Dependency Exception: In high schools, if an 18-year-old student remains a financial dependent for tax purposes under Section 152 of the Internal Revenue Code, the school may—at its discretion—disclose education records to parents without the student's consent.

---

Defining "Education Records" vs. Statutory Exemptions

FERPA defines Education Records expansively as those records, files, documents, and other materials that:

1. Contain information directly related to an identifiable student; and
2. Are maintained by an educational agency or institution or by a person acting for such agency or institution.

This includes cumulative files, standardized test scores, attendance logs, disciplinary write-ups, special education dossiers, emails referencing an identifiable student, video surveillance footage focusing on student disciplinary events, and electronic student information system (SIS) entries.

Statutory Exemptions from "Education Records"

                      FERPA EDUCATION RECORDS: EXCLUSION MATRIX

  COVERED EDUCATION RECORDS                     STATUTORY EXCLUSIONS (NOT FERPA)
  ┌────────────────────────────────────────┐    ┌────────────────────────────────────────┐
  │ • Cumulative academic transcripts      │    │ • Sole Possession Notes (memory aids)  │
  │ • Disciplinary office referrals        │    │ • Law Enforcement Unit Records (SRO)   │
  │ • Special Education / IEP dossiers     │    │ • Employee Personnel Files             │
  │ • Student attendance & medical logs    │    │ • Postsecondary Medical/Psych Records  │
  │ • Emails regarding identifiable child  │    │ • Alumni records created post-grad     │
  └────────────────────────────────────────┘    └────────────────────────────────────────┘

1. Sole Possession Notes Exception: Notes made by instructional, supervisory, or administrative personnel that are kept in the sole possession of the maker, are used only as a personal memory aid, and are not accessible or revealed to any other person (except a temporary substitute).
   • Loss of Exemption: The moment a teacher, counselor, or principal shares these notes with a colleague, places them in a shared departmental folder, or references them in an official administrative meeting, the notes lose their sole possession exemption and instantly become formal education records subject to parental inspection.
2. Law Enforcement Unit Records: Records created and maintained solely by a school's dedicated security department or School Resource Officer (SRO) for law enforcement purposes.
3. Employment Records: Records relating exclusively to an individual's employment capacity (e.g., student worker evaluations), provided employment is not contingent upon student status.

---

Parental and Eligible Student Rights Under FERPA

FERPA establishes three core procedural rights for parents and eligible students:

1. Right of Inspection and Review

• The school district must comply with a parental request to inspect and review education records within a reasonable period, not to exceed 45 calendar days from the date of the request.
• Schools are not required to provide copies of records unless geographic distance or logistical barriers effectively preclude parents from exercising their right to physically inspect the records in person.
• Schools cannot charge a fee to search for or retrieve records, though a reasonable fee for paper copying is permissible.
• Destruction Prohibition: A school cannot destroy requested education records while a parental request for inspection is pending.

2. Right to Request Record Amendments

• If a parent believes an education record is inaccurate, misleading, or in violation of the student's privacy rights, they may request an amendment.
• If the district decides not to amend the record, it must notify the parent of its refusal and advise them of the right to a formal administrative hearing.
• If, following the hearing, the district still declines to amend the record, the parent has the legal right to place a written explanatory statement in the file commenting on the contested information. This statement must be maintained and disclosed alongside the record for the life of the file.
• Limitation: The amendment process cannot be used to challenge a substantive grade or disciplinary penalty assigned by an educator, but only whether the recorded mark accurately reflects what the educator assigned.

3. Right to Prevent Non-Consensual Disclosure

Prior written parental consent is required before a school discloses Personally Identifiable Information (PII) from education records, unless a specific statutory exception applies.

---

Directory Information vs. Personally Identifiable Information (PII)

---

Statutory Exceptions to Prior Written Consent

Under 34 CFR § 99.31, schools may release PII from education records without parental consent under narrow, specific circumstances:

1. School Officials with Legitimate Educational Interests: Administrators, teachers, counselors, support staff, and school board members who need access to the record to fulfill their professional and contractual responsibilities. The district must define its criteria for "school officials" and "legitimate educational interests" in its annual FERPA notice.
2. Transfer to Another Educational Institution: Releasing records to officials of another school, school system, or postsecondary institution where the student seeks or intends to enroll.
3. Health and Safety Emergencies: School officials may disclose PII to appropriate parties (law enforcement, emergency medical personnel, public health officials) if knowledge of the information is necessary to protect the health or safety of the student or other individuals. The district must demonstrate an articulable and significant threat to health or safety.
4. Judicial Orders and Lawfully Issued Subpoenas: The school must make a reasonable effort to notify the parent in advance of compliance, so the parent may seek protective legal action (e.g., a motion to quash).
   • Exception to Notice: Advance notice is prohibited if the subpoena is a federal grand jury subpoena or law enforcement subpoena issued with an explicit judicial order directing non-disclosure.
5. Financial Aid Applications, Accrediting Organizations, and State/Federal Educational Audits.

---

Protection of Pupil Rights Amendment (PPRA)

The Protection of Pupil Rights Amendment (PPRA, 20 U.S.C. § 1232h) applies to programs administered by the U.S. Department of Education. It protects student privacy concerning instructional materials, surveys, analyses, and evaluations.

The Eight Protected Survey Categories:

1. Political affiliations or beliefs of the student or parent.
2. Mental or psychological problems of the student or family.
3. Sex behavior or attitudes.
4. Illegal, anti-social, self-incriminating, or demeaning behavior.
5. Critical appraisals of other individuals with whom respondents have close family relationships.
6. Legally recognized privileged relationships (lawyers, physicians, ministers).
7. Religious practices, affiliations, or beliefs of the student or parent.
8. Income (other than required by law to determine program eligibility).

PPRA Compliance Mandates:

• Prior Written Parental Consent (Opt-in): Required before minor students participate in any survey funded in whole or in part by the U.S. Department of Education that touches upon any of the eight protected categories.
• Parental Notice and Opt-Out: For non-federally funded surveys involving protected topics, schools must provide parents with advance notice, the right to inspect survey instruments, and the opportunity to opt their child out.

---

Mandatory Child Abuse and Neglect Reporting

Every state has enacted child welfare legislation designating specific professionals as mandated reporters of child abuse, neglect, and exploitation. School administrators, teachers, counselors, nurses, and other personnel are commonly designated as mandated reporters, but the covered roles, threshold, reporting channel, and deadline come from the applicable state statute.

                    MANDATORY REPORTING DECISION PROTOCOL

  1. Concern Arises            2. Apply State Law            3. Preserve the Inquiry
  ┌───────────────────────┐     ┌───────────────────────┐     ┌───────────────────────┐
  │ Observe facts or hear │     │ If the legal threshold│     │ Ensure safety; do not │
  │ a disclosure; address │────►│ is met, report through│────►│ delay to investigate or│
  │ immediate safety.     │     │ the required channel  │     │ confront a suspected  │
  │                       │     │ and by its deadline.  │     │ perpetrator first.    │
  └───────────────────────┘     └───────────────────────┘     └───────────────────────┘

The Statutory Standard: "Reasonable Cause to Suspect"

• Threshold: Mandated reporters are legally required to report when they have reasonable cause to suspect or reasonable cause to believe that a child has suffered abuse or neglect.
• Not Proof: The law does not require certainty, physical evidence, or absolute proof. The standard is whether a reasonable professional, presented with the same facts and observations, would suspect abuse.

Jurisdiction-Specific Timelines and Reporting Protocols

1. Prompt Required Notification: Make the report through the agency, hotline, online system, or law-enforcement channel specified by current state law; some jurisdictions require an immediate oral report while others prescribe a different method.
2. Complete Required Follow-Up: Reporting channels, written-report requirements, and deadlines vary by state. Use the method and time limit in current state law and district protocol, document the facts requested by the reporting agency, and never postpone the initial report to perfect internal documentation.

Report Promptly; Do Not Substitute an Internal Investigation

Once the state-law reporting threshold is met, the school should make the mandated report without running a parallel inquiry to decide whether abuse is substantiated. Personnel may ask only minimal, nonleading questions needed to clarify immediate safety or understand a spontaneous disclosure; they should not repeatedly question the child, confront a suspected perpetrator, or notify a suspected abusive caregiver before consulting the reporting agency. CPS and law enforcement conduct the forensic investigation. The school separately follows emergency-safety steps and any agency directions.

Reporter Protections and Consequences Vary by State

• Good-Faith Protection: State statutes commonly protect good-faith reporters, but the scope and conditions of immunity are jurisdiction-specific.
• Failure-to-Report Consequences: State law determines whether a failure is criminal, civil, professional, or employment-related and what mental state triggers liability. A supervisor's reporting chain does not replace an individual's direct duty where state law imposes one.

---

Digital Privacy, Student Data Security, and Vendor Governance

As educational technology proliferates, administrators must safeguard digital student data against commercial exploitation and security breaches:

• Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501): Regulates the online collection of personal information from children under 13 years of age. While commercial operators must obtain verifiable parental consent, schools may provide consent on behalf of parents solely for educational software used exclusively for school purposes. Schools cannot consent to commercial profiling, tracking, or targeted advertising.
• Vendor Data Privacy Agreements: School districts must execute binding contractual agreements with digital vendors requiring compliance with FERPA, encryption of student PII, prohibition of data mining, and immediate notification protocols in the event of a cybersecurity breach.

---

SLLA Administrative Decision Scenarios & Exam Pitfalls

Scenario A: Bruises, Disclosures, and the Administrative Reflex

Scenario: A kindergarten teacher notices severe linear welts and burns on a five-year-old child's back while assisting with a coat. The child whispers, "Daddy burned me with a lighter because I spilled my milk." The teacher informs the principal. The principal tells the teacher, "Let me call the father into my office this afternoon to hear his side of the story before we ruin a family with a CPS report."

• Correct Administrative Action: The principal's directive is illegal and dangerous. The principal and teacher must immediately call Child Protective Services and local law enforcement. Under applicable state reporting law and sound safeguarding practice, personnel should not delay the mandated report to conduct a substitute investigation or confront the suspected caregiver; any limited clarification and later school employment inquiry must be coordinated with child-protection, law-enforcement, and district protocols. Investigating compromises criminal forensics and places the child at severe risk of retaliation upon returning home.
• ETS Exam Trap: Selecting options where the principal acts as an "objective investigator," interviews family members, or seeks to "confirm the facts" before contacting welfare authorities.

Scenario B: Law Enforcement Requests for Student Records

Scenario: A police detective investigating a local weekend car theft enters the high school and demands the cumulative disciplinary records, attendance logs, and home address of a 17-year-old student. The detective does not possess a search warrant, court order, or subpoena, but asserts, "This is an active criminal police investigation."

• Correct Administrative Action: Refuse to release the records. Under FERPA, law enforcement officers are third parties who have no automatic right to inspect student education records without prior written parental consent, a judicial order, or a lawfully issued subpoena. While FERPA contains an exception for health and safety emergencies, routine criminal investigations do not meet the "articulable and significant threat" threshold. The principal must inform the detective that records can only be released upon receipt of a subpoena or judicial warrant.
• ETS Exam Trap: Believing that an active police investigation automatically suspends FERPA requirements.

Scenario C: The Counselor's Shared Observation Notes

Scenario: A high school counselor keeps a private notebook detailing sessions with an eleventh-grader discussing family trauma and substance concerns. During a weekly student support team meeting, the counselor shares photocopies of these notes with the assistant principal, school social worker, and reading specialist. Two months later, the parents request to inspect all education records, including the counselor's notebook. The counselor refuses, claiming the notes are exempt "sole possession notes."

• Correct Administrative Action: Provide the notes to the parents for inspection. By distributing copies to other staff members during the support meeting, the counselor destroyed the "sole possession" status of the notes. Under FERPA, once personal memory aids are revealed or shared with any other person, they become official education records subject to parental inspection within 45 days.
• ETS Exam Trap: Selecting options stating that counseling or psychological notes are permanently exempt from FERPA inspection even after being shared with administrative teams.