HumenhukCIPP/US Study Guide
Chapter 10: Education Privacy

When Disclosure of Education Records Is Permitted

Reviewed by Victor Humenhuk. Published . Reviewed .

FERPA permits disclosure of education records only if the data is not PII, it is unblocked directory information, the rights holder consents, the disclosure goes to the rights holder, or a statutory exception applies. Nondirectory data like GPA, grades, or transcripts cannot be released without valid consent.

How this supports CIPP/US study

Use this lesson to separate sectoral scope, data type and regulated entity before testing an exception. Continue with the CIPP/US practice exam.

  • The information is not personally identifiable
  • The information is directory information the student has not blocked
  • Consent has been provided by the holder of the FERPA rights
  • The disclosure is made to the holder of the FERPA rights
  • A statutory exception applies, such as for health or safety purposes
Grades and transcripts need consent

Nondirectory information such as GPA, grades, or transcripts may not be released without valid consent, even though it is PII. PII can still be disclosed if it qualifies as unblocked directory information.

Sources and study method

This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.