FERPA (Student Privacy)
The Family Educational Rights and Privacy Act (FERPA) is a Federal law designed to protect the privacy of a student’s education record and prohibits the University from disclosing information from those records without the written consent of the student.
Frequently Asked Questions
Under the terms of FERPA, the University is permitted to disclose Directory Information about a student without the student’s consent. Johns Hopkins University has established the following as directory information:
- Legal name of a student who is in attendance or who has been in attendance
- Name pronunciation
- Local address of a present or former student
- Hopkins e-mail address of a present or former student
- Local telephone number of a present or former student
- Major field of study of a present or former student
- Participation in Johns Hopkins Athletics (limited to hometown, sport, height, and/or weight)
- Dates of attendance
- Degrees and awards received, and pertinent dates
- Photograph (still, video, audio)
- Classification (enrollment status), and level of study
FERPA permits students to inform JHU that the information above is not to be released. A student may restrict the release of directory information by submitting the Exclusion of Directory Information Form to the Office of the University Registrar.
If the student restricts the release of directory information, a flag is checked in SIS, the student information system. The restricted information cannot be released on that student without written consent of that student.
Can the University disclose non-directory personally identifiable information without the written consent of the student?
The University can disclose non-directory personally identifiable information without written consent from the student under the following conditions:
- University school officials, faculty, administrators, and staff members who have a legitimate educational interest
- Officials of another school or school system in which the student enrolls or intends to seek enrollment
- U.S. Comptroller General, Secretary of the U.S. Dept. of Education, U.S. Attorney General, state and local educational authorities
- Third party contractors, including the National Student Clearing House
- Financial Aid representatives
- Accrediting organizations
- A lawfully issued subpoena
- In a health or safety emergency
- To the parent of a student under the age of 21 -for the disclosure of the student’s violation of any federal, state or local law
At the post-secondary level, parents/legal guardians are unable to inspect education records without written authorization from their student. The university may disclose education records to parents/legal guardians of students who are claimed as dependents for federal income tax purposes. For more information, visit the Blue Jay Families website.
The University may notify parents/legal guardians when there is a health or safety emergency involving their student if they claim the student as their dependent, or if they are listed as the student’s emergency contact. For more information, visit the Blue Jay Families website.
At the discretion of the University, the parents/legal guardians of students under the age of twenty one (21) at the time of disclosure may be notified if their student is found responsible for violations of the University. These violations include alcohol and drug policies, as well as cases that result in suspension and expulsion.
No. The public posting of grades by the student’s name or social security number without the student’s written permission is a violation of FERPA. Additional violations include:
- Linking the name of a student with that student’s social security number in any public manner, such as requiring an SSN on submitted materials
- Leaving graded tests in a stack for students to pick up by sorting through the papers of all students
- Circulating a printed class list with names and/or social security numbers as an attendance roster
- Discussing the progress of any student with anyone other than the student (including parents/legal guardians) without the written consent of the student
- Providing lists of students enrolled in class to a third party for any commercial purpose
- Providing student schedules or assisting anyone other than University employees in finding a student on campus
As an employee of Johns Hopkins University, you may have access to student records. The confidentiality, use, and release of student records are governed by FERPA. You have a responsibility to protect all education records in your possession. These include records relating to students who have business with your department, any documents from the Office of the University Registrar and Divisional Offices of the Registrar, computer printouts in your office, name lists, official course or grade rosters. Your job places you in a position of trust and you are an integral part in ensuring that student information is handled properly.
In general, all student information must be treated as confidential. Even public or JHU-defined directory information is subject to restriction on an individual basis. Examples of FERPA violations include:
- Releasing confidential student information (non-directory) to another student, University Organization, or outside entities
- Distributing transcripts of a student’s academic record. All requests for transcripts must be submitted to the Office of the University Registrar or respective Divisional Office of the Registrar
- Leaving reports or computer screens containing confidential student information in view of others or leaving your terminal unattended
- Sharing your computer access code with others
- Using a SSN to identify a student when disclosing or confirming directory information to a third party without consent
- Emailing a SSN
- Giving out directory information if the student has submitted an Exclusion of Directory Information Form
A Special Note to Student Employees
Safeguarding student privacy is a matter of concern to all offices within the University and to all persons who have access to office facilities. The Office of the University Registrar and Divisional Offices of the Registrar are the official repositories for student academic records, folders and other files, although records relating to students are maintained in many other offices on campus. As a student employee, you are placed in a unique position of trust since a major responsibility of offices is the security and confidentiality of student records and files. Examples of FERPA violations include:
- Making or permitting unauthorized use of any information in the files maintained, stored, or processed by the office in which you are employed. This includes copies of registration and add/drop forms.
- Discussing the contents of any record, report, or academic status with any person
- Removing any official record or report, or copy thereof, from the office where it is maintained
- Disclosing directory or non-directory information about a student over the phone without first consulting with your supervisor
- Any knowledge of a violation must be immediately reported to a supervisor
If the University does not comply with FERPA, the Department of Education may issue a notice to cease the practice complained of and ultimately could withhold student aid funding. Depending on the type of record and the nature of the disclosure, other penalties could be imposed.
As part of the Johns Hopkins University, participation in any University activities, including, but not limited to, attendance, participation in class and other campus and University activities, constitutes an agreement by the student to the University’s use, reproduction and distribution of the student’s photographs or image, video, and/or audio both now and in the future.
If any student in a class, where such photographing or recording is to take place does not wish to have their image or voice so used, the student should raise the matter in advance with the instructor.
Additional information is available at https://keepteaching.jhu.edu/wp-content/uploads/2020/09/Zoom-Guidelines09112020.pdf
If you have any questions concerning FERPA or questions concerning the type of information that can or cannot be released, please contact the Office of the Registrar at 410-516-8080 or the Office of the General Counsel at 410-516-8128.