At covered schools, FERPA generally gives parents rights to inspect and review their child’s education records and limits disclosure of personally identifiable information. The rights generally transfer to the student at age 18 or attendance at a postsecondary institution. [1]
Access is not limited to one school employee
A school may disclose records without consent under specified exceptions, including qualifying school officials with legitimate educational interests. Other exceptions address transfers, certain emergencies, and legally required disclosures. An employee’s curiosity is not a legitimate educational interest. [2]
Parents and adult students
After rights transfer, a parent does not automatically retain the same direct access right. Exceptions, including certain tax-dependent-student disclosures, can permit sharing. Custody arrangements and court orders should also be reviewed before assuming a parent’s rights are restricted.
Request records clearly
Identify the student and records sought, follow the school’s identity-verification process, and distinguish an inspection request from a demand for immediate copies. FERPA generally requires access within 45 days, subject to its rules. [1]
For example, a teacher working with a student may need an IEP, while an unrelated staff member has no comparable reason to read it.
Consent and exceptions should identify the actual recipient
A school should determine which record is sought, who is requesting it, and the legal basis for access or disclosure. A signed consent should not be treated as permission to share unrelated records with everyone. Directory-information disclosure has a separate notice and opt-out framework, and grades should not simply be relabeled directory information. Records excluded from FERPA’s education-record definition require their own analysis rather than automatic treatment as unrestricted information. For a parent seeking access, ask the school to identify any claimed transfer of rights, court restriction, or exception instead of assuming a custody label answers the question. An adult student’s authorization for one parent does not necessarily authorize disclosure to another relative. Keep the request, consent, and written response so the precise disclosure issue can be reviewed. [1] [2]
See parents' IEP rights and school surveillance footage under FERPA. Whether a document is an education record and whether disclosure is permitted are separate questions.
Primary sources
Sources checked: October 31, 2026.