FERPA

For a complete statement of student rights under the Family Educational Rights and Privacy Act (FERPA), see Article 8 (Administrative Regulations) of UB’s Rules and Regulations and UB’s Access to Student Information Family Educational Rights and Privacy Act (FERPA) Policy.

The preceding information constitutes official public notice of the university’s compliance with the Family Educational Rights and Privacy Act. Any student having questions about this should contact the Office of Student Conduct and Advocacy, 9 Norton Hall, 716-645-6154.

FERPA was enacted to protect student information. It mandates that you, the student, are allowed to inspect your education records and limit others from reviewing that information without your permission, unless allowable as described below.

Who can review my educational records?

• School officials and SUNY System Administration with a legitimate educational interest in the records.
• Appropriate parties in a health or safety emergency. This includes educational records as well as directory information, and/or personally identifiable, non-directory information with or without student consent.
• Potential schools where you intend to enroll.
• Officials with a subpoena or permission due to a judicial order.
• Organizations providing financial aid to the student (parent payments are not included here).
• Officials complying with federal, state or local audits or compliance investigations.
• Government entities with a legitimate need for the records (ie, IRS, military recruiters, etc.).

Parent Access under FERPA

All privacy rights transfer from a parent to a student upon the age of 18 or when the student moves into a post-secondary educational institution unless you can prove that the student is still your dependent. If the student is not your dependent, then you may only view/receive directory information.

Family Education Rights and Privacy Act (FERPA) Information Disclosure Consent

Students have the option of allowing the offices of Financial Aid, Registrar, Student Accounts, Exploratory and Pre-Professional Advising Center, academic departments, and advisors, and 1Capen to discuss specific academic and/or financial information with one or more identified individuals. Students should submit the FERPA Information Disclosure Consent form (UBIT name and password required) to allow for the disclosure of their personal information. The student may revoke this access at any time by submitting a new form.

Release of Information

The University may publish directory and other information about you, including your name, current address, telephone number, email address, major field of study, dates of attendance, and degrees and awards received.

The University may also release directory and information to interested organizations.

If you would like to prevent us from releasing directory information to outside parties, a completed Request for Directory and Information Release/Non-Release (PDF) form may be submitted to our office. This form may also be used to reinstate directory information release.

Student information will still be shared within the University for educational and administrative purposes, regardless of a student's directory release status.

Faculty/Staff and FERPA

Faculty and staff are required to protect the privacy of student information. Faculty and staff may not discuss any information about a student with a parent or a spouse without written permission from the student. If a student has requested that their information not be listed, then faculty and staff may not provide any information about that student, including acknowledging that that student attends UB.

NOTE:

University staff and faculty are educated on how to maintain the privacy and confidentiality of employee, applicant, student and donor information. University staff and faculty are required to complete a Handling Data Safely at UB course. This course provides information regarding the state and federal laws and University policies that govern access to and use of non-public personal, private and sensitive information about employees, applicants, students and donors. Upon completion of the course, staff and faculty are required to agree to maintain the confidentiality of private data.