Frequently Asked Questions about the University's FERPA Policy
Definitions
Yes, the danger must be imminent. As an example, planning for tornado season in advance would not constitute an emergency, but being in the midst of one would be. The U.S. Department of Education has explained, in a document entitled "Addressing Emergencies on Campus (June 2011)," as follows: "Disclosures for health or safety emergency reasons do not include disclosures to address emergencies for which the likelihood of occurrence is unknown, such as would be the case in emergency preparedness activities. Rather, disclosures made under the health or safety emergency provision must be “in connection with an emergency,” which means it must be related to an actual, impending, or imminent emergency, such as a natural disaster, a terrorist attack, a campus shooting, or the outbreak of an epidemic disease."
Once the notes are no longer in your own personal files – i.e., they are accessible by others on campus – they are considered education records and subject to FERPA.
“Student” means an individual who has registered with the University for any form of instruction, whether or not for credit. Student status begins at the time of such registration, even if the student has not yet arrived on campus or commenced instruction, and continues until such time as the student graduates, completes the relevant program, is expelled, or otherwise indicates a permanent separation from the University. A student who has been suspended continues to be considered a student for purposes of University policies and procedures. Additionally, an undergraduate student who has not registered for three consecutive semesters (excluding the summer term) is no longer considered a student.
“Graduate” for purposes of this definition means the conferring to or earning of a degree by a student, regardless of whether the student actually attends a graduation ceremony.
The University reserves the right to consider the following individuals to be students:
- Any individual who has confirmed acceptance and is living on campus property but not yet registered for instruction; and
- Any individual considered to be enrolled, even if not actively taking classes.
Additionally, individuals should be aware that their actions post-acceptance but pre-registration may impact their admissions status.
Generally, prospective students (those who have not yet registered) are not considered University of Dayton students yet, and therefore the FERPA requirements do not yet apply – meaning, you would not need a consent form signed to have discussions with the parents. For additional information please refer to FAQ #3.
Student Access to Records
No. A student’s right to his or her records is to have access to those records – not to actually have copies or otherwise be given possession of those records, particularly in a specific format.
Students who have access to education records by way of a disciplinary or grievance committee role, a student employment position or a volunteer position are expected to comply with the University’s FERPA Policy. And then any access to records is not free rein to records; it should only be in narrow and supervised circumstances. University staff and faculty who have students reporting to them who have access to education records should ensure that those students understand and agree to comply with their FERPA obligations. Having the student sign a Student Employee / Volunteer Confidentiality Agreement is recommended; the signed agreement should be kept by the office for which the student works or volunteers. Finally, anyone who has access to education records should only use that access when such access is consistent with his or her role for the University. That is, a student employee who works in a Dean’s office has no right to download records during his or her “off” time, i.e., to peruse records out of mere curiosity.
Student Consent to Release
In Banner, instead of the ordinary student information, you will see a label of “CONFIDENTIAL INFORMATION.”
The electronic “viewing” access in FlyerView does not count as consent beyond that electronic viewing. Thus, if a parent were to call an instructor and say, “My son/daughter gave me access on FlyerView to see grades, so you have to talk to me about those grades,” that would not be correct. The student would have to provide consent for that conversation to happen. You can use the standardized Consent Form to document that consent.
Employees' Requests for Records and the Gatekeeper Role
You first should obtain approval from the Institutional Review Board.
No – if you are seeing or discussing records as part of your ordinary University duties, then you had a legitimate educational interest in those records. The Records Request Form is meant to come into play when access to records is atypical. For example, if you work in Student Development and personnel from the Student Success Office regularly consult with you in the performance of their jobs, that sharing of information would be considered routine and ordinary. But if someone from another office with which you do not regularly consult were to call you for a record, the Records Request Form would help establish that he or she has a legitimate educational interest in the record.
Yes, it is recommended that you document the people with whom you regularly work and discuss education records as part of your and their jobs. For example, if you work in Athletics and regularly permit coaches to know student athlete grades – so that the coaches in turn can satisfy NCAA academic performance standards – then you should consider documenting that protocol, i.e., that you regularly share records with coaches on a need-to-know-basis.
Gatekeepers should maintain those form in their records, so as to document the University’s record-handling should the University be audited.
No. As a chair, you automatically have a legitimate educational interest in such records to make the assessments required of your position. It is only when a University employee who is not a gatekeeper wants to see a student’s past performance to assess his or her performance in a particular course that an issue under FERPA would arise; in such a case, the curious University employee would not have legitimate educational interest.
Policy Violations
Inappropriate disclosure of information protected by the FERPA Policy constitutes a violation of the University’s Illegal, Fraudulent, Dishonest, and Unethical Conduct Policy. The policy lists as a prohibited activity: "7. Unauthorized disclosure of private employment, personal, or medical information of an employee or a student."
Miscellaneous
Any photographs or video taken under the direction of the University marketing and communications office, or any other University sponsored program, may be used in news stories, on the web or in University publications. Photos may be used in publicly-disseminated promotional materials. An individual's name will not be listed in the caption or accompanying text without his or her permission. If someone prefers not to be photographed, he or she should simply inform the photographer at the time photos are taken.