Skip Navigation
small NCES header image
Forum Guide to Protecting the Privacy of Student Information: State and Local Education Agencies

6.I. Document the Release

Agencies or schools should maintain records of access, retrieval, or release of records, including the names of persons retrieving records and the purposes for each release, and a list of personnel authorized to have access to the file. They should also maintain a record of user requests for data that have been denied or only partially fulfilled. Such information can be used for periodic reviews of agency confidentiality and data release policies.

Information about releases with or without prior consent of the parent should remain with the education record as long as the record is maintained. It is a good practice to document all access and release. However, documentation is not required if the request was made by or release was made to the most common users:

  • the parent or eligible student;
  • a school official who has been determined to have a legitimate educational interest;
  • a requester with written consent from the parent or student; or
  • a requester seeking directory information only.

Would you like to help us improve our products and website by taking a short survey?

YES, I would like to take the survey


No Thanks

The survey consists of a few short questions and takes less than one minute to complete.
National Center for Education Statistics -
U.S. Department of Education