Directory Information and FERPA: Understanding What Can Be Shared by Schools

Directory information under FERPA refers to specific student details that colleges and universities may disclose without prior written consent, unless a student opts out. This guide explains what qualifies as directory information, how institutions handle disclosures, and the rights students retain to limit or control what is shared. It covers common examples, legal boundaries, and practical steps for both schools and students to navigate FERPA protections.

What Counts As Directory Information

Under FERPA, directory information is data that a school may release publicly if it is not restricted by a student’s prior consent. The exact categories can vary by institution, but typical examples include a student’s name, address, email, telephone listing, date and place of birth, major field of study, participation in officially recognized activities and sports, dates of attendance, degrees and honors received, and the most recent educational agency or institution attended. Schools must clearly define these categories in their annual FERPA notice and student handbook.

Importantly, directory information is not universally public by law; institutions control disclosure through policy. Some institutions limit access to directory information to requests from the general public or use internal databases only. The key distinction is that FERPA allows disclosure of directory information with no student prior consent, but this does not imply it must be shared in every circumstance.

What FERPA Allows Institutions To Disclose

FERPA grants schools the ability to disclose directory information without written consent, provided the disclosure is in alignment with the institution’s published policies. Disclosures can occur to:

• Parents and eligible students, under specified conditions, such as during official communications or verification processes.
• Other schools to which a student transfers, for the purpose of applying or enrolling.
• Employees of the institution who need the information to perform their duties, such as faculty advisors or athletics staff.
• Law enforcement or other government agencies, if required by law or approved by policy.

Schools must ensure that disclosures of directory information stay consistent with their published policies and that the information released is indeed categorized as directory information. When in doubt, institutions often issue formal FERPA notices that list what qualifies and the procedures used for disclosure.

Opting Out Of Directory Information Disclosure

Students have the right to prevent the disclosure of directory information. Upon enrollment, institutions typically provide a process to opt out or limit certain disclosures. If a student exercises this option, the school must honor it and treat the student as a “no-disclosure” record for directory information unless the student later changes their mind.

The opt-out mechanism commonly appears in enrollment forms or student portals and may require a written statement or digital consent. The policy should specify which categories of information can be restricted and under what circumstances a restriction applies. Even with an opt-out, certain disclosures may still occur under FERPA’s exceptions, such as disclosures to school officials with legitimate educational interests or in connection with a health or safety emergency.

Directory Information In Practice: Examples And Scenarios

Consider practical scenarios to illustrate when directory information might be shared. A university might post a student’s name and major on a public honors list, or publish an athlete’s roster with jersey number and hometown. A high school might share a student’s name and graduation date in a school-wide announcement. In contrast, a student who has opted out may not appear on public rosters or honor lists, though the institution’s obligations to share emergency contact information with designated parties typically remain unaffected.

Public postings, printed programs, and official websites are common channels for directory information disclosures. However, institutions often provide alternatives for opt-out students, such as non-public listings, restricted rosters, or opt-out intervals that limit visibility to approved audiences.

What About Privacy Rights And Safety

FERPA also safeguards student privacy by requiring that schools protect records from unauthorized access and ensure disclosures are appropriate. While directory information can be released without consent, schools must still uphold confidentiality standards for non-directory information. In cases involving safety concerns or emergencies, disclosures may be made to protect students or the campus community, even if a student has opted out of directory information sharing.

Institutions balance transparency with privacy by clearly defining directory information, documenting opt-out options, and providing annual FERPA notices. This framework helps maintain trust while allowing necessary information sharing to support academic and campus operations.

How Institutions Communicate FERPA Policies

Annual FERPA notices are a standard practice across U.S. colleges and K-12 schools. These notices outline:

• The categories of directory information the institution may disclose without consent.
• The rights of students to opt out of disclosures.
• The procedures for exercising opt-out rights and questions about disclosures.

Institutions typically publish these notices on official websites and include them in student handbooks or registration materials. Students and families should review the notices carefully, note any changes, and use the provided channels to submit opt-out requests.

Common Myths About Directory Information

Misunderstandings can blur FERPA’s protections. Common myths include:

• All student information is public: Only directory information is eligible for disclosure without consent; non-directory information requires consent or an exception.
• Opting out eliminates all sharing: Opting out restricts directory information disclosures but does not bar necessity-based disclosures for safety or academic operations.
• Directory information is always shared with the public: Some disclosures are limited to internal audiences or specific third parties and may not be publicly posted.

Clarifying these points helps students exercise informed choices and ensures institutions apply FERPA policies consistently.

Best Practices For Compliance And Usability

To remain compliant and user-friendly, institutions should:

• Publish clear, specific categories of directory information in the FERPA notice.
• Provide simple, accessible opt-out options with explicit timelines and instructions.
• Train staff on FERPA basics, including when disclosures are permissible under policy and law.
• Maintain secure data management practices to prevent unintended disclosures of non-directory information.
• Offer regular reminders about rights and policy updates, especially around changes in opt-out procedures.

For students and families, practical steps include reviewing the annual FERPA notice, noting the categories of directory information, and promptly submitting opt-out requests if privacy preferences differ from default disclosures. Keeping a copy of opt-out confirmations and understanding the institution’s disclosure channels can prevent misunderstandings during campus events or ceremonies.