school officials can release personally identifiable information without parental consent
School Officials and the Release of Personally Identifiable Information (PII)
Key Takeaways
- The Family Educational Rights and Privacy Act (FERPA) generally requires consent but provides specific legal exceptions.
- Consent is not required for “school officials” with a legitimate educational interest.
- Information can be released without consent during health and safety emergencies.
Under the Family Educational Rights and Privacy Act (FERPA), school officials can release personally identifiable information (PII) without parental consent only under specific exceptions. The most common exception is for officials with a legitimate educational interest, though emergency, judicial, and directory-level exceptions also exist.
Table of Contents
- Primary Legal Exceptions
- Legitimate Educational Interest
- Emergency and Safety Situations
- Summary Table
- Frequently Asked Questions
Primary Legal Exceptions
While the privacy of student records is strictly protected, FERPA (20 U.S.C. § 1232g; 34 CFR Part 99) outlines several conditions where written consent is waived:
- Directory Information: Schools may disclose “directory” information (name, address, telephone, honors) if they have given public notice and allowed parents time to opt out.
- Transfer of Records: Information can be sent to other schools where the student seeks or intends to enroll.
- Judicial Orders: Schools must comply with a judicial order or a lawfully issued subpoena, though they must usually make a reasonable effort to notify the parents first.
- Financial Aid: Information necessary to determine eligibility, amount, or conditions for financial aid.
Legitimate Educational Interest
The most frequent “no-consent” disclosure happens internally. A school official is generally defined as a teacher, administrator, board member, or support staff. However, they cannot access any record they want. They must demonstrate a legitimate educational interest, meaning they need the information to fulfill their professional responsibilities for that specific student.
Pro Tip: Contractors, consultants, and volunteers can also be considered “school officials” if they perform an institutional service that the school would otherwise use employees for.
Emergency and Safety Situations
In a Health and Safety Emergency, the “Emergency Exception” allows school officials to disclose PII to appropriate parties (such as law enforcement or medical personnel) if the knowledge of that information is necessary to protect the health or safety of the student or other individuals. This is a non-consensual disclosure based on the urgency of the threat.
Summary Table
| Exception Category | Condition for Release | Primary Recipient |
|---|---|---|
| School Official | Legitimate educational interest | Teachers, Administrators |
| Emergency | Threat to health or safety | First Responders, Police |
| Directory | Publicly designated information | General Public (if no opt-out) |
| Legal | Subpoena or Court Order | Judicial Authorities |
Frequently Asked Questions
1. Can a school release information to the police without a warrant?
Yes, if there is an immediate health or safety emergency, or if the information is classified as “directory information” and the parent hasn’t opted out. Otherwise, a subpoena or court order is typically required.
2. What is considered “Personally Identifiable Information” (PII)?
PII includes the student’s name, the name of the student’s parents or other family members, the address, social security number, or any information that would allow a reasonable person in the school community to identify the student with certainty.
3. Does FERPA apply to private schools?
FERPA applies to all educational agencies and institutions that receive funds under any program administered by the U.S. Department of Education. Most private schools at the elementary and secondary levels do not receive such funds and are not subject to FERPA.
Next Steps
Would you like me to explain the specific process a parent must follow to “opt-out” of directory information sharing?