Privacy of Student Records

Policy Summary

The university and its faculty and staff will protect the privacy of students’ education records as required by federal law and regulations and as set forth in this policy. Eligible parents and students of record in attendance at the university will receive annual notice of their rights under the Family Educational Rights and Privacy Act of 1974, as amended, (FERPA) by appropriate methods, which may include electronic publication on the university website. 

Related Regulations

The following statement of policy and procedures has been adopted in compliance with the provisions of the Family Educational Rights and Privacy Act (FERPA) of 1974, as amended.

Who is Governed by this Policy 

  • Students
  • Staff
  • Faculty

Policy

Right to Inspect and Review Student Education Records 

Any student who attends or has attended The George Washington University shall have the right to inspect and review the student's education records, as defined in FERPA, within 45 days of the day the university receives a request for access.  An education record is any record that is directly related to a student and maintained by the university or by a party acting for the university.  Students should submit to the university Registrar, dean, head of the academic department, or other appropriate official, written requests that identify the record(s) they wish to inspect. The school official will make arrangements for access and notify the student of the time and place where the records may be inspected. If the records are not maintained by the school official to whom the request was submitted, that official shall advise the student of the correct official to whom the request should be addressed.  Parents of a "dependent" student, as defined by the Internal Revenue Code, who complete a written declaration of financial dependency form, which is available from the Office of the Registrar, may be similarly granted access to that student's education records.   

Under FERPA, certain records are not considered education records and, therefore, are excluded from inspection. The following records fall into this category and will not be made available: 

  1. Financial records of parents.  
  2. Confidential letters and statements of recommendation entered in the education record after January 1, 1975, to which the student has waived right of access.  
  3. Personal notes of institutional, supervisory and educational personnel.  
  4. Campus law enforcement records, except reports of investigations and incidents that have been forwarded for action or information to other school officials.  
  5. Employee files, if the student is employed by the university.  
  6. Medical, psychological-counseling and psychiatric records, or case notes maintained by appropriate professional personnel. (However, upon request, the student may have any such records reviewed by a physician or other appropriate professional of the student’s choice.)  
  7. Admissions records on file in other component units (of the university) in which the student has not yet been enrolled. 
  8. Alumni records that contain information about a student after he or she is no longer in attendance at GW and that do not relate back to when he or she was a student. 

Requirement to Authenticate Requestor Identity 

When a student requests access to his or her education records, faculty and staff must verify or “authenticate” the identity of that student before releasing the education records.  The student’s identity may be authenticated as follows: 

  1. For in-person requests, picture identification may be used (such as a driver’s license, state identification card, passport, or GWorld Card); 
  2. For requests by telephone the student’s identity may be confirmed via a combination of the GWID number plus some other authenticating information unique to that student (such as birth date or period of attendance). 

In the event a request for a student’s education records is made by an individual other than that student, contact the Office of the Registrar before releasing any information. When such requests are submitted directly to the Office of the Registrar, Student Account Services, Student Financial and Registration Services, or the Office of Student Financial Assistance, personnel in those departments may release the information in accordance with that department’s authentication procedures. 

Right to Request Amendment of Records  

Any student shall have the right to request the amendment of that student's education records, if he or she believes they are inaccurate or misleading.  A proper request to correct a student’s education record must: 

  1. Be written to the school official responsible for the record;  
  2. Clearly identify the part of the record they want to be changed; and 
  3. Specify why the record is inaccurate or misleading. 

Any written request which does not include the required information will not be considered and the requestor will be notified in writing that the request was not made properly.  Upon receipt of a proper request for amendment, the university will make a prompt determination within a reasonable time, but not more than thirty days, as to whether the proposed correction is accepted or rejected. The student will be notified in writing that the amendment has occurred or that the request is denied. A letter denying the request will state the reasons for the decision and notify the student of the right to request a hearing. Additional information regarding the hearing procedures may be obtained from the Office of the Registrar. 

When Consent is Required to Disclose Personally Identifiable Information from Student Records 

Any student has the right to consent to disclosures of personally identifiable information contained in that student's education records, except to the extent that FERPA authorizes disclosure without consent. This consent remains in effect until a written rescission is submitted to the Office of the Registrar. 

FERPA permits disclosure without a student’s consent to school officials with legitimate educational interests in a student’s education record. A school official is a person employed by the university in an administrative, supervisory, academic, research or support staff position (including law enforcement unit personnel and health staff); a person or company with whom the university has contracted (such as an attorney, auditor or collection agent); a person serving on the Board of Trustees; or a student serving on an official committee, such as a disciplinary or grievance committee, or assisting another school official in performing his or her tasks. A school official has a legitimate educational interest if the official needs to review an education record in order to fulfill his or her professional responsibility. In addition, the university may disclose education records without a student’s consent to officials of another institution in which a student seeks or intends to enroll.   

The university may also disclose records to parents of a student, if the student is  younger than 21 and charged with violating any laws or university policies regarding the use or possession of alcohol or controlled substances, or in connection with a health or safety emergency.  

Disciplinary records are considered education records and may be disclosed, without consent, to: 

  1. An alleged victim of a crime of violence when the disclosure is the results of a disciplinary hearing regarding the alleged perpetrator of that crime with respect to that crime, regardless of whether the alleged perpetrator was found in violation of the  Student Code of Conduct 
  2. Anyone requesting the final results of a disciplinary hearing against an alleged perpetrator who has been found in violation of the Student Code of Conduct relating to a crime of violence or non-forcible sex offense 

For purposes of this exception, final results include only the name of the student, the basic nature of the violation the student was found to have committed, and a description and the duration of any sanction imposed against the student. 

The Office of the Senior Vice President and General Counsel should be consulted prior to the release of the disciplinary record related to a crime of violence or non-forcible sexual offense. Questions about exceptions should be directed to the Office of the Registrar. 

FERPA also provides the university with discretion to release directory information without a student’s consent to anyone making a request. Directory information includes the following: student’s name; current address (including e-mail); telephone numbers; likenesses used in university publications including photographs; name and address of emergency contact; date of birth; dates of attendance; school or division of enrollment; enrollment status; field of study;  class; credit hours earned; degrees or certificates earned; honors received; participation in university recognized organizations and activities (including intercollegiate athletics); and height, weight, and age of members of athletic teams. Date of birth will be considered directory information only for the purpose of complying with applicable laws.  Note that this list may change from time to time. 

Any student who does not wish directory information released must file written notice to this effect in the Office of the Registrar. 

Absent a court order to the contrary, the university is generally required to make a reasonable effort to notify the student in the event of a subpoena of his or her record or a judicial order requiring the release of such data.  (Please see section VI. below regarding exceptions to the FERPA disclosure requirements as required under the USA PATRIOT Act of 2001.) 

Right to File a Complaint 

A student has the right to file a complaint with the Department of Education concerning alleged failure by the university to comply with the requirements of FERPA. Complaints should be filed in writing to the following address: 

Family Policy Compliance Office 
U.S. Department of Education 
400 Maryland Avenue, SW  
Washington, D.C. 20202-5920 

USA PATRIOT Act of 2001 and FERPA  

The USA PATRIOT Act of 2001 amended FERPA to allow for an additional circumstance under which an institution may disclose student records to law enforcement officials without violating FERPA.  Specifically, an institution does not violate FERPA if it discloses education records without the student’s consent or knowledge to the U.S. Attorney General or his designee in response to an ex parte order related to a terrorism investigation or crime.  The institution does not need to make a record of the disclosure.  Further, a college or university is not liable to any person for good faith disclosure of education records in response to such an order.  GW complies with such provisions, and employees who receive such orders should forward them immediately to the Office of the Senior Vice President and General Counsel for review and response, in accordance with the Subpoenas and Other Legal Notices information on the General Counsel website

The USA PATRIOT Act also mandated the establishment, implementation, and expansion of the federal government’s electronic student visa-monitoring program.  As of January 30, 2003, higher education institutions were required to begin reporting data on non-immigrant students and visitors in the F, J, and M visa classifications via an electronic internet-based reporting system called SEVIS (Student and Exchange Visitor Information System).  Most of the data to be reported by higher education institutions in SEVIS is that which institutions were already required to maintain under prior immigration regulations. Compliance with SEVIS does not violate FERPA and does not require foreign student or scholar consent. GW complies with the SEVIS reporting requirements.  

Forms

Related Information

Contacts

Contact Phone Number Email Address
Office of the Registrar (202) 994-4900  [email protected]

 

Responsible University Official: Vice Provost of Enrollment and Student Success
Responsible Office: Office of the Registrar

Noncompliance with this policy can be reported through this website.