FERPA protects privacy of student records and governs access; what must schools obtain to disclose records?

• A. Written consent to disclose records is generally required, with exceptions.
• B. Verification of the requester's identity is sufficient for disclosure.
• C. Written consent is generally required to disclose records to others, with FERPA exceptions.
• D. FERPA applies only to college students, not K-12.

Answer: (C)

FERPA governs who can see a student’s education records, and the core rule is that schools generally need written consent before releasing those records to anyone outside the school, with specific exceptions that allow disclosure without consent. This is what makes the statement that written consent is generally required to disclose records to others, with FERPA exceptions, the best fit.

Think of the exceptions as the safe paths where disclosure is permissible without written consent: for example, sharing with school officials who have a legitimate educational interest, transferring records to another school where the student is enrolling, complying with a subpoena or court order, or in health or safety emergencies. Directory information can also be shared without consent if the family hasn’t opted out. These carve-outs maintain privacy while allowing necessary information to move in legitimate contexts.

It’s also good to remember that FERPA protects student records for all students, including those in K-12 and in higher education, and it doesn’t mean disclosure is always allowed even with a request.