FERPA (Student Privacy)

The Family Educational Rights and Privacy Act (FERPA) is a Federal law designed to protect the privacy of a student’s education record and prohibits the University from disclosing information from those records without the written consent of the student.

Frequently Asked Questions

What is Directory Information?

Under the terms of FERPA, the University is permitted to disclose Directory Information about a student without the student’s consent. Johns Hopkins University has established the following as directory information:

  • Name of a student who is in attendance or who has been in attendance
  • Name pronunciation
  • Local address of a present or former student
  • Hopkins e-mail address of a present or former student
  • Local telephone number of a present or former student
  • Major field of study of a present or former student
  • Participation in Johns Hopkins Athletics (limited to hometown, sport, height, and/or weight)
  • Dates of attendance
  • Degrees and awards received, and pertinent dates
  • Honors
  • Photograph (still, video, audio)
  • Classification (enrollment status), and level of study

FERPA permits students to inform JHU that the information above is not to be released. A student may restrict the release of directory information by submitting the Exclusion of Directory Information Form to the Office of the University Registrar.

If the student restricts the release of directory information, a flag is checked in SIS, the student information system. The restricted information cannot be released on that student without written consent of that student.

Can the University disclose non-directory personally identifiable information without the written consent of the student?

Can parents/legal guardians have access to their student’s educational records?

Will the University notify me if my student is sick or hurt?

The University may notify parents/legal guardians when there is a health or safety emergency involving their student if they claim the student as their dependent, or if they are listed as the student’s emergency contact. For more information, visit the Blue Jay Families website.

Will the University tell me if my student is in violation of the student conduct code?

At the discretion of the University, the parents/legal guardians of students under the age of twenty one (21) at the time of disclosure may be notified if their student is found responsible for violations of the University.  These violations include alcohol and drug policies, as well as cases that result in suspension and expulsion.

Is the public posting of grades by faculty permissible under FERPA?

No. The public posting of grades by the student’s name or social security number without the student’s written permission is a violation of FERPA. Additional violations include:

  • Linking the name of a student with that student’s social security number in any public manner, such as requiring an SSN on submitted materials
  • Leaving graded tests in a stack for students to pick up by sorting through the papers of all students
  • Circulating a printed class list with names and/or social security numbers as an attendance roster
  • Discussing the progress of any student with anyone other than the student (including parents/legal guardians) without the written consent of the student
  • Providing lists of students enrolled in class to a third party for any commercial purpose
  • Providing student schedules or assisting anyone other than University employees in finding a student on campus

I’m a Johns Hopkins staff member. What are my responsibilities under FERPA?

As an employee of Johns Hopkins University, you may have access to student records. The confidentiality, use, and release of student records are governed by FERPA. You have a responsibility to protect all education records in your possession. These include records relating to students who have business with your department, any documents from the Office of the University Registrar and Divisional Offices of the Registrar, computer printouts in your office, name lists, official course or grade rosters. Your job places you in a position of trust and you are an integral part in ensuring that student information is handled properly.

In general, all student information must be treated as confidential. Even public or JHU-defined directory information is subject to restriction on an individual basis. Examples of FERPA violations include:

  • Releasing confidential student information (non-directory) to another student, University Organization, or outside entities
  • Distributing transcripts of a student’s academic record. All requests for transcripts must be submitted to the Office of the University Registrar or respective Divisional Office of the Registrar
  • Leaving reports or computer screens containing confidential student information in view of others or leaving your terminal unattended
  • Sharing your computer access code with others
  • Using a SSN to identify a student when disclosing or confirming directory information to a third party without consent
  • Emailing a SSN
  • Giving out directory information if the student has submitted an Exclusion of Directory Information Form

A Special Note to Student Employees

Safeguarding student privacy is a matter of concern to all offices within the University and to all persons who have access to office facilities. The Office of the University Registrar and Divisional Offices of the Registrar are the official repositories for student academic records, folders and other files, although records relating to students are maintained in many other offices on campus. As a student employee, you are placed in a unique position of trust since a major responsibility of offices is the security and confidentiality of student records and files. Examples of FERPA violations include:

  • Making or permitting unauthorized use of any information in the files maintained, stored, or processed by the office in which you are employed. This includes copies of registration and add/drop forms.
  • Discussing the contents of any record, report, or academic status with any person
  • Removing any official record or report, or copy thereof, from the office where it is maintained
  • Disclosing directory or non-directory information about a student over the phone without first consulting with your supervisor
  • Any knowledge of a violation must be immediately reported to a supervisor

What happens if the University does not comply with FERPA?

If the University does not comply with FERPA, the Department of Education may issue a notice to cease the practice complained of and ultimately could withhold student aid funding. Depending on the type of record and the nature of the disclosure, other penalties could be imposed.

Are recordings of classes and other activities permissible under FERPA?

As part of the Johns Hopkins University, participation in any University activities, including, but not limited to, attendance, participation in class and other campus and University activities, constitutes an agreement by the student to the University’s use, reproduction and distribution of the student’s photographs or image, video, and/or audio both now and in the future.

If any student in a class, where such photographing or recording is to take place does not wish to have their image or voice so used, the student should raise the matter in advance with the instructor.

Additional information is available at https://keepteaching.jhu.edu/wp-content/uploads/2020/09/Zoom-Guidelines09112020.pdf

If you have any questions concerning FERPA or questions concerning the type of information that can or cannot be released, please contact the Office of the Registrar at 410-516-8080 or the Office of the General Counsel at 410-516-8128.