FERPA Explained: What College Parents Actually Need to Know
Affiliate Disclosure: This page contains affiliate links. If you purchase through one of our links, UniversityParent may earn a commission at no additional cost to you. We only recommend products we've researched and believe will be useful for college students and their parents.
Here is how a lot of parents find out about FERPA: they call the registrar's office to ask about their student's grades, or they email a professor to discuss why their child is struggling in a course, and they get a polite but firm response. We're sorry, we can't share that information with you.
It feels like a wall. And it can feel personal, like the school is being difficult or unhelpful. But it is not the school being difficult. It is federal law.
FERPA, the Family Educational Rights and Privacy Act, is a 1974 law that gives students control over their own educational records. The moment your child turns 18, or the moment they enroll in a postsecondary institution (college, university, or trade school), whichever comes first, those records belong to them. Not to you. To them. The school is legally prohibited from sharing that information with you without your student's written permission.
The good news is that this is genuinely simple to fix. Most families sort it out in one conversation with their student and one form submitted to the registrar. This guide will walk you through exactly what FERPA covers, what it means for you as a parent, and how to handle it without making it a bigger deal than it needs to be.
For a deeper look at each law separately, see our complete guides: FERPA and Educational Records Release covers exactly what records your student controls and how to request access, and HIPAA Medical Authorization for College Students walks through the healthcare consent forms to have in place before move-in.
Section 1: What FERPA Actually Covers
The law applies to "educational records," which sounds narrow but covers more ground than most parents expect.
Educational records under FERPA include grades, transcripts, GPA, enrollment status, academic standing, academic probation notices, financial aid records, and in many cases disciplinary records. That last one surprises people. If your student is put on academic probation, placed on a waitlist for a class, or receives a financial aid award letter, none of that information can be shared with you without their authorization.
The law applies to anyone who is not the student or an authorized school official with a legitimate educational interest. That includes parents, stepparents, spouses, and employers. The fact that you are paying tuition does not change this. The fact that you claimed your student as a dependent on your taxes does not automatically change this either, though it is relevant in certain situations (more on that in Section 7).
There are a few things FERPA does not cover. Directory information, which typically includes a student's name, enrollment status, field of study, and dates of attendance, can generally be shared unless the student has specifically opted out of directory information disclosure. FERPA also does not prevent a professor or advisor from reaching out to you on their own initiative if they are genuinely concerned about your student. What it prevents is them sharing records if you ask. There is a meaningful difference between a professor calling you out of concern and a professor answering your questions about grades.
One important exception: schools may notify parents if a student under 21 is found responsible for a drug or alcohol violation on campus. This is a "may," not a "must," and schools vary in how they handle it. But it is worth knowing the exception exists.
One email a week, for parents doing this right now
The deadlines, checklists, and conversation scripts that actually matter at each stage of the year. Free, and you can unsubscribe anytime.
Looking for the free toolkits? They are on our resources page, no email required.
Section 2: What This Means for You as a Parent
Let's be specific about what changes once your student is covered by FERPA.
You cannot call the registrar and ask for your student's GPA or transcript. You cannot email a professor and ask how your student is performing. You cannot receive the bursar statement, financial aid award letter, academic probation notice, or any official academic communication directly from the school unless your student has specifically authorized it. You cannot log into their student portal on their behalf.
For parents who have been closely involved in their student's academics, this can feel disorienting. You have probably been reading progress reports and talking to teachers for 13 years. The shift is real, and the frustration is understandable.
It helps to reframe this as what it actually is: a legal recognition that your student is an adult. FERPA is not an adversarial law. It is designed to protect students' privacy from employers, landlords, and anyone else who might want access to their records. You happen to be caught in the same net, not because the law views you as a threat, but because the law treats your student as an autonomous person.
The most important practical consequence is this: if your student is struggling academically and not telling you, FERPA prevents the school from telling you either. That gap is real. A FERPA release does not solve the communication problem, but it does mean that if something comes to a head, the school can actually loop you in.
Section 3: The FERPA Release (How to Fix This)
A FERPA release is a written authorization from the student that allows their school to share specific educational records with named individuals. It is the standard, straightforward solution to everything described above.
Here is how it works. The student initiates and signs the form — you cannot do this for them, and you cannot compel them to do it. Most schools make this process easy. The student logs into their student portal or visits the registrar's office, fills out a form (often online, takes about five minutes), specifies which records they are authorizing the school to share, names the individuals they are authorizing, and submits it.
The form is free. It typically takes effect immediately or within a few days.
When completing the release, the details matter. Releases can be broad (all educational records) or specific (financial aid only, or billing and bursar records only). If both parents want access, each parent typically needs to be named separately. Most schools also have a time limit — some require the release to be renewed each academic year, others allow it to remain in effect until the student revokes it. Check the specific school's policy.
The conversation to have with your student is worth thinking through carefully. The framing that tends to work is practical rather than emotional. Something like: "This is not about me monitoring your grades. It is about being able to help you if something goes wrong. If there is a billing dispute I need to resolve, or if you are dealing with something academically and need financial support, I need to be able to talk to the school directly. It just makes things easier."
That is true, and it lands better than framing it around trust.
Section 4: Financial Aid Records and FERPA
A lot of parents do not realize until they are deep into college financial planning that FERPA covers financial aid records, not just grades.
This means the aid award letter, scholarship notifications, and financial aid status are all protected. Even if you are the one writing the tuition checks, the financial aid office cannot discuss your student's aid package with you without a release.
There is one exception worth knowing: if a parent takes out a Parent PLUS Loan on the student's behalf, the school may share the student's financial aid information with that parent for purposes related to the loan. The operative word is "may." Many schools still require a formal FERPA release in practice, regardless of the loan. Do not count on the Parent PLUS exception unless you have confirmed it with the financial aid office at your student's specific school.
The cleaner approach is to have your student include financial aid and billing records explicitly in their FERPA release. At many schools, financial/billing access is a separate authorization from academic records access. Make sure you check both boxes.
One more piece to be aware of: the IRS Form 1098-T, which you may need for education tax credits, is issued to the student, not to the parent. Your student should save this form and pass it along to you (or your tax preparer) at year end. It is a good habit to establish early.
For more on financial planning for college, see our college student health insurance guide and related guides.
Section 5: FERPA and Medical Records (HIPAA)
This is the part of the conversation where two different federal laws start to overlap, and it is worth taking a moment to separate them.
FERPA governs educational records held by schools. HIPAA, the Health Insurance Portability and Accountability Act, governs medical records held by healthcare providers. They are related but distinct, and fixing one does not fix the other.
Here is where it gets slightly complicated: campus health center records may be covered by FERPA or by HIPAA depending on the institution and how the health center is structured. Some campus health centers fall under FERPA because they are considered part of the educational institution. Others are independent healthcare entities governed by HIPAA. If your student goes to the campus health center, it is worth finding out which law applies — but either way, you will need separate authorization.
A FERPA release from the registrar covers educational records. It does not give you access to your student's medical records, whether those are at the campus health center, a local urgent care, a hospital, or a therapist's office.
To access medical records, your student needs to sign a HIPAA authorization. This is a separate document, not connected to the FERPA process, that designates you (or another named individual) as someone medical providers can speak with. Many parents complete this as part of a broader "turning 18" legal checklist, alongside a healthcare proxy and a durable power of attorney.
If you need both academic access and medical access, you need both a FERPA release (through the school's registrar) and a HIPAA authorization (through healthcare providers). They are not interchangeable.
See our full guide to legal documents when your child turns 18 for a step-by-step walkthrough of the HIPAA authorization and other documents worth having in place before your student leaves for college. Services like LegalZoom make it straightforward to prepare these documents without a full attorney engagement.
Section 6: What to Do if Your Student Won't Sign
This happens more often than parents expect, and it is worth addressing directly rather than treating it as a problem to push through.
Some students see a FERPA release as surveillance. They hear "I want access to your records" as "I don't trust you to handle this." That reaction is understandable, even if it is not the intent. If your student pushes back, the first step is to understand the specific concern rather than restating the request.
The conversation that tends to work focuses on concrete scenarios rather than general access. Pick something specific and practical: "If there is a billing error and I need to call the bursar's office, I need to be on the account to even have that conversation." Or: "If you end up on academic probation and we need to make a financial decision about next semester, I need to be able to get information directly." Make it about logistics and contingencies, not about oversight.
If your student still declines, respect it. This is their legal right. A FERPA release cannot be compelled, and pushing hard tends to damage exactly the relationship you are trying to maintain.
There are still things you can do. You can discuss academics in regular conversation. You can be on the phone with your student while they are on hold with the registrar, letting them relay information. You can ask your student to share documents or letters with you directly. None of that requires a FERPA release.
The most important investment is the relationship itself. Students who feel trusted and supported are more likely to come to their parents when something is actually wrong. That is worth more than formal records access.
Section 7: When Schools Can Share Without Permission
FERPA is not absolute. There are specific situations where schools can share information with parents even without a release.
Health and safety emergencies. If there is a genuine emergency involving a student's health or safety, FERPA allows the school to disclose relevant information to parents. Schools have some latitude in determining what qualifies, and this exception is meant for real emergencies, not general concern. But it does exist.
Drug and alcohol violations. If a student under 21 is found responsible for a drug or alcohol policy violation on campus, the school may notify parents. This is discretionary on the school's part. Some schools have clear policies about when they will notify parents; others handle it case by case. Worth looking up your student's school policy before you need it.
Financial dependency. If your student is a dependent on your federal income tax return, FERPA technically permits schools to share records with parents on that basis alone. In practice, many schools still require a signed FERPA release regardless, because administering the dependency exception requires verification they are not set up to handle. Do not rely on this exception as your access strategy. It is real, but it is not reliable.
These exceptions are meaningful, but none of them are substitutes for a FERPA release. A release is cleaner, faster, and does not depend on a school official making a judgment call in the moment.
Frequently Asked Questions
What is FERPA?
FERPA stands for the Family Educational Rights and Privacy Act. It is a federal law passed in 1974 that protects the privacy of students' educational records. Once a student turns 18 or enrolls in a postsecondary institution, the rights under FERPA transfer from the parents to the student. The student controls who can see their academic records.
Can I see my college student's grades?
Not automatically, no. Once your student is 18 or enrolled in college, their grades, GPA, and transcript are their protected educational records. The school cannot share them with you without your student's written authorization (a FERPA release). Your student can share this information with you directly anytime — FERPA only restricts the school from sharing it.
How do I get a FERPA release?
Your student submits a FERPA release form through the school, usually through the registrar's office or the student portal. The student has to initiate and sign it. Most schools have an online form and the process takes about five minutes. The release is free.
Does my student have to sign a FERPA release?
No. A FERPA release is entirely voluntary. The student has the legal right to keep their educational records private, including from their parents. You can ask and explain why it would be useful, but you cannot require it.
What happens to FERPA if I'm paying tuition?
Nothing changes automatically. Paying tuition does not give parents access to educational records under FERPA. If your student is a dependent on your tax return, there is a technical exception in the law, but in practice most schools still require a signed release. The practical answer is: get the release.
How is FERPA different from HIPAA?
FERPA covers educational records held by schools. HIPAA covers medical records held by healthcare providers. A FERPA release does not give you access to your student's medical records. For medical access, your student needs to sign a HIPAA authorization separately. If you want both, you need both documents.
The Bottom Line
FERPA protects your student's privacy. That is actually a good thing, even when it creates friction for you as a parent.
The path forward is straightforward. Have an honest conversation with your student about why access matters in practical terms, not emotional ones. Then ask them to complete a FERPA release through their school's registrar. If financial aid and billing are important (and they almost always are), make sure those are included explicitly. And while you are at it, have them sign a HIPAA authorization as well, so you have medical access if you need it.
Two conversations. Two forms. And you are no longer locked out.
For a full checklist of legal documents every parent should address when their student turns 18, including HIPAA authorization, healthcare proxy, and power of attorney, see our guide to legal documents at 18. Services like LegalZoom can help you get these prepared quickly and affordably.
For parents still sorting out health insurance coverage, see our college student health insurance guide.
Looking for more guides on getting through college with your student? Browse resources for college parents on UniversityParent.com.