The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of

student education records and gives parents or eligible students the right to access, amend, and

control the disclosure of their records. FERPA applies to all educational agencies and institutions that

receive funds under any program administered by the U.S. Department of Education12

FERPA requires schools to do all of the following:

Verify the identity of students who make requests for access to their records. Schools must use

reasonable methods to identify and authenticate the identity of parents, students, school officials,

and any other parties to whom they disclose education records12

Provide students with access to their records within a specified amount of time. Schools must

provide parents or eligible students with an opportunity to inspect and review the student’s

education records within 45 days of receiving a request. Schools are not required to provide copies of

records unless it is impossible for parents or eligible students to review the records at the school12

Respond to all reasonable student requests regarding explanation of their records. Schools must

provide parents or eligible students with an opportunity to request the amendment of the student’s

education records that they believe are inaccurate, misleading, or otherwise in violation of the

student’s privacy rights. Schools must consider the request and decide whether to amend the records

within a reasonable time. If the school decides not to amend the records, it must inform the parent

or eligible student of their right to a hearing on the matter12

FERPA does not require schools to do the following:

Obtain student authorization before releasing directory information in their records. Directory

information is information contained in a student’s education record that would not generally be

considered harmful or an invasion of privacy if disclosed. Examples of directory information include

the student’s name, address, phone number, e-mail address, date and place of birth, major field of

study, participation in sports and activities, dates of attendance, degrees and awards received, and

most recent school attended. Schools may disclose directory information without consent unless the

parent or eligible student has opted out of such disclosure. Schools must notify parents and eligible

students of the types of information they designate as directory information and of their right to opt

out of directory information disclosure12

Therefore, the correct answer is D. Obtain student authorization before releasing directory

information in their records.

Reference:

Family Educational Rights and Privacy Act (FERPA)

IAPP CIPP/US Certified Information Privacy Professional Study Guide, Chapter 4: Federal Privacy

Laws, Section 4.3: The Family Educational Rights and Privacy Act (FERPA)