Records & Privacy

The Family Educational Rights and Privacy Act of 1974 (FERPA) is a federal law that governs how we protect and disclose student educational records. As a recipient of federal funding, CU Boulder is obligated to comply with FERPA.

At CU Boulder, FERPA protections go into effect on the first day of classes of the student's first term of enrollment.

High-Level Guidelines

  • Never use student names, SSNs, student IDs, photos or other personally identifiable information when posting class or grade rosters, regardless of medium.
  • Ensure learning management and other systems do not display sensitive information to others.
  • Do not maintain student grades with personally identifiable information on public computers, websites or personal laptops. (Questions about appropriate storage and technologies may be directed to IT Security or the Office of the Registrar.)
  • Never leave student papers, exams or files on desks/desktops when away from the office.
  • Securely dispose of documents and files containing sensitive information.
  • Unless you know the student, always confirm their identity by asking for a photo ID before discussing nondirectory information; you may also use their security passphrase or ID photo (accessible through Campus Solutions and ).
  • Confirm the student hasn't restricted release of their directory information before you disclose it.
  • Request a release prior to drafting a student letter of recommendation.
  • Never provide class schedules to unauthorized third parties for purposes of locating a student.
  • Before disclosing student record information to a parent or other third-party, refer to our third-party policies and procedures.

  FERPA Guidelines for Faculty & Staff 

FERPA Training

To assist university faculty and staff in understanding FERPA and its impact on their professional responsibilities, our office has developed two online FERPA tutorials.

CU: FERPA

Length: 45 minutes

This course will enhance your understanding of the confidentiality protections that federal law affords the records and information that the university maintains about our students.

University employees with CU-SIS systems access must earn a passing score every three years to retain systems access.

How to Access Skillsoft

  1. Log in to .
  2. Click on the CU Resources tab, if applicable.
  3. In the navigation menu (upper right), click the menu icon (NavBar).
  4. Click "CU Resources," then "Training."
  5. Click the Skillsoft tile.
  6. In the "Search Content" field, type the course title and either hit the Enter/Return key or click the magnifying glass icon.
  7. Locate the course and click "Launch."
  8. The course will open in a pop-up window.

CU: FERPA For Faculty

Length: 30 minutes

This course defines what student education records are and who has access to them as well as the rules that apply to accessing and releasing student information.

How to Access Skillsoft

  1. Log in to .
  2. Click on the CU Resources tab, if applicable.
  3. In the navigation menu (upper right), click the menu icon (NavBar).
  4. Click "CU Resources," then "Training."
  5. Click the Skillsoft tile.
  6. In the "Search Content" field, type the course title and either hit the Enter/Return key or click the magnifying glass icon.
  7. Locate the course and click "Launch."
  8. The course will open in a pop-up window.

Reporting FERPA Violations

If you realize that a FERPA violation has occurred, contact the Office of the Registrar immediately. We can help determine how to proceed and what notifications may be necessary.