The Family Educational Rights and Privacy Act (FERPA) governs the privacy of student records. Under FERPA, information about personally identifiable students is private, except for “directory information.” Directory information is information that has been determined by the Board of Regents to be public. Even directory information must be kept private, however, if a student has exercised the right to “suppress” directory information—suppression status should always be checked before disclosing data as directory information. Private education records may only be shared within the institution with school officials who have a legitimate educational interest, or as otherwise authorized by law. You can find more information on student records at the One Stop webpage, including a short FERPA tutorial. The University’s administrative policy on Managing Student Records is also instructive. Contact Paul Savereide for advice and counsel regarding these issues.