Student Records Policy
To inform students of their rights and responsibilities pertaining to their university records, in compliance with federal notification requirements. To protect the privacy of student records. To articulate definitions relating to student records, how they may be accessed and disclosed, the complaint procedure and other information relevant to the student record.
University employees (faculty, staff, student employees) and other covered individuals (e.g., affiliates, vendors, independent contractors, etc.) in their accessing and handling of student records, data or information in any form (paper, digital text, image, audio, video, microfilm, etc.) during the course of conducting University business (administrative, financial, teaching, research or service). This policy shall apply to all campuses and units of the University of Kansas and to all current or former students of the University of Kansas (KU).
- Student Access to Education Records
- Waiver of Rights
- Disclosure of "Personally Identifiable" and "Directory" Information
- Notice to Third Parties
- Maintaining Education Records and Records of Requests and Disclosures
- Student's Right to Request Amendment of Information Contained in Education Records
- Complaint Procedure
The University of Kansas protects the privacy of its students’ education records in compliance with the federal Family Educational Rights and Privacy Act (FERPA) and its implementing regulations. FERPA and KU’s Student Records Policy also provide students the right to inspect and review their educational records. A notice of this policy is published each year on the Office of the University Registrar website. Notification of this publication is made annually to enrolled students via email. Questions regarding the University of Kansas’ policy should be directed to the Office of the University Registrar or the Office of the Vice Provost for Student Success on the Lawrence/Edwards campus, or the offices of the Registrar or Office of the Dean of Students at the University of Kansas Medical Center (KUMC), Kansas City, for both the Kansas City and Wichita campuses.
A student has the right and shall be accorded the opportunity to inspect, review, and/or receive copies of the student's educational records upon written request to the appropriate record custodian. For the Lawrence/Edwards campus, Primary Record Custodians are found in the Student Record Policy Records Custodians, and questions should be addressed to the University Registrar. For the Medical Center campus, school-specific custodian information may be found in the KUMC Student Handbook, and general questions should be directed to the Registrar on that campus.
The University must comply with the student's request within a reasonable period of time, not to exceed 45 days after the request is received.
Such copies will be provided at the student's request and expense; however, the charge to the student for any such records, except for official academic transcripts, statements of degree and enrollment certifications may not exceed the copy charges allowed by the University (see the Comprehensive Fee Schedule). The University may not charge a fee to search for or retrieve a record requested by a student regarding only the education record. The student shall be asked to provide the student's University I.D. and/or other government issued/approved identification in order to receive and/or view the student’s educational records.
A student who is financially indebted to the University will not be allowed to receive a copy of his or her academic transcript/diploma, nor will a request to transmit the academic transcript/diploma to another person or agency be honored so long as the debt remains; however, the student will be permitted to view the documents in accordance with the provisions of this policy. Academic transcript and diploma requests also may be denied in connection with disciplinary actions resulting from academic or non-academic misconduct.
The University is not required to allow inspection and review of the following records:
- Financial records of the student's parents submitted as part of the financial aid process or for other official University purpose;
- Confidential letters and statements of recommendation that were placed in the student's education records prior to January 1, 1975, as long as they are used only for the purpose for which they were specifically intended;
- Confidential letters and statements of recommendation received after January 1, 1975, for which the student has signed a waiver of the right to access and that pertain to (a) admission to this or any other educational institution or agency; (b) application for employment; or (c) receipt of an honor or honorary recognition; so long as these letters are used solely for the purpose for which they were specifically intended.
If an education record contains information on more than one student, the student may inspect only the information about their records.
The University may request, but not require, students to waive rights under this policy. The waivers must be in writing and signed by the student, or must be positively indicated electronically and include appropriate electronic authorization. A student may waive right to inspect and review confidential statements and confidential letters of recommendation only if: (1) the student, upon request, is notified of the names of all persons providing letters/statements; (2) the letters/ statements are used only for the purpose for which they were originally intended; (3) the waiver is not required as a condition of admission to or for any other service or benefit of the University.
The student may revoke any waiver in writing, the revocation to apply only to documents received or entered into the record after the date of execution of the revocation.
The University shall obtain the written consent, or system consent via appropriate electronic authorization in an authorized University system from the student before disclosing personally identifiable information from the education records of the student, other than directory information, except as otherwise provided in this policy.
The University may, without the consent of the student, disclose directory information. If a student wishes to have such information withheld, the student must notify the registrar at either the Lawrence or KUMC campuses either in writing, or via an authorized University system requiring electronic authentication. This notification may occur at any time; however, if a student wishes to prevent the publication of directory information in the University telephone directory, the student must notify the registrar at either the Lawrence or KUMC campuses, by the end of the first week of the term.
The University may disclose personally identifiable information from a student’s Education Record(s) without the consent of the student if the disclosure is made to:
- School officials within the institution determined to have a legitimate educational interest(s).
- Authorized persons to comply with a judicial order or lawfully issued subpoena, provided the University makes a reasonable effort to notify the student in advance of compliance; except the University will not disclose to the student information about a grand jury subpoena, a subpoena issued for a law enforcement purpose when notice is prohibited, or a court order obtained by the United States Attorney General or Assistant Attorney General in investigations or prosecutions of certain criminal offenses or an act of terrorism, in accordance with by law or regulation. certain officials of the U.S. Department of Education, the Comptroller General and state and local educational authorities in connection with an audit or evaluation of Federal or State supported education programs, or for the enforcement of or compliance with Federal legal requirements that relate to those programs.
- Financial aid personnel in conjunction with an application for or receipt of financial assistance, provided that the disclosure is needed: (1) to determine the eligibility of the student for financial aid; (2) to determine the amount of financial aid; (3) to determine the conditions that will be imposed; or (4) to enforce the terms or conditions of the financial aid.
- Parent(s) or legal guardian(s) of dependent students who provide a written request for grades to the University Registrar pursuant to Board of Regents policy. Dependency, for this purpose, is defined by the Internal Revenue Code of 1954, Section 152. The student will be notified in writing and/or electronically of any disclosure of grades made to the student's parent(s) or legal guardian(s).
- Appropriate parties, including parents, in connection with an emergency, if knowledge of the information is necessary to protect the health or safety of the student or other individuals. In making a determination to disclose personally identifiable information from an education record in a health and safety emergency, the University shall take into account the totality of the circumstances pertaining to the threat or health of the student or other individuals. If the University determines that there is an articulable and significant threat to the health or safety of a student or other individuals, disclosure may be made to any person whose knowledge of the information is necessary to protect the health and safety of the student or others. All disclosures will be documented. Kansas Department of Health and the Environment (KDHE) or local law enforcement officials for the following purposes: Watkins Health Services is required to report to KDHE the names and current address of students who have certain communicable diseases, including hepatitis, tuberculosis and sexually transmitted diseases. Additionally, Watkins Health Services is required to report to local law enforcement officials the name of any student who is wounded with a deadly weapon.
- Organizations conducting studies for, or on behalf of, educational agencies or institutions to develop, validate, or administer predictive tests; to administer student aid programs; to improve instruction or services in a manner that does not permit personal identification of students by individuals other than representatives of the organizations that have legitimate interests in the information. The University and the organization will enter into a written agreement, containing: the purpose, scope, and duration of the study, and the information to be disclosed in the study; restrictions to use information only for the purpose of the study, to destroy or return the information when no longer needed, to specify the time period for destruction of information; and agreement to not re-disclose information. The Office of the University Registrar (Lawrence/Edwards) or Registrar (Medical Center) must provide clearance for the release of and will maintain a record of all student records involved in the release. The University may release records or information from education records after the removal of all personally identifiable information or when the release is of de-identified student level data for the purpose of education research by attaching a code to each record that cannot be used to ascertain personally identifiable information about a student.
- Accrediting organizations to carry out their accrediting functions.
- An outside contractor, consultant, or other party who is acting for the University, subject to the written direction and security requirements of the University, and who is performing a service or function that the University would otherwise have to perform for itself.
- To initiate legal action against a parent or student, or to defend the University if a parent or student initiates legal action against the University, when the student’s education records are relevant to the legal action.
- Individuals requesting academic information for deceased students. The Office of the University Registrar (Lawrence/Edwards) and Registrar (Medical Center) will evaluate each request for the release of a transcript or other academic records of a deceased student on the individual merits of that request. The University of Kansas may deny the request in whole or to release only part of the academic records that are requested.
- Officials of another school, school system, or postsecondary institution where a student seeks or intends to enroll, or is already enrolled, to supplement, update or correct any records sent by the University during the student’s application or transfer period.
- To a victim of an alleged perpetrator of a crime of violence or non-forcible sex offense, as defined in 8 U.S,C. 16, the final results of the disciplinary proceeding conducted by the University against the alleged perpetrator of that crime or offense, regardless of the conclusion. See Clery Act Compliance Information.
- To Veterans Administration officials pursuant to 38 U.S.C. 3690 (c).
- To the public concerning sex offenders and other individuals required to register under community notification programs.
- Information the university has designated as “directory information,” unless a hold has been placed upon release of the information by the student (click link to access form and instructions).
- As described by the parental notification policy.
The University must inform the parties to whom personally identifiable information is given that they are not permitted to disclose that information to others without the written consent of the student and that the information is to be used only for the purpose(s) intended. However, parties to whom personally identifiable information is given may make further disclosures of the information if they are acting on behalf of the University and as directed by the University. The names of the additional parties to which the receiving party may disclose the information and the legitimate interests of each of these additional parties must be provided as part of the request process. If a third party outside the University permits access to personally identifiable information in violation of University policy, the University shall not permit access to information from education records to that third party for a period of not less than five (5) years. Once the third party that is acting on behalf of the University has finished the project or contract under which personally identifiable information is utilized, the third party shall be required to return the information to the University, or if directed by the University, to securely destroy and/or wipe systems containing such data.
Each office that maintains education records shall adopt its own policy regarding the destruction of education records, subject to the University Record Retention policy. No education record, however, may be destroyed if there is an outstanding request or notice of pending request to inspect and review the record. Also, the record of requests for and disclosures of the education record and any explanations that are a part of the record must be maintained for as long as the education record to which it pertains is maintained.
The record custodian shall maintain documentation of requests and disclosures of personally identifiable information from a student's education records. The record shall include, whether requests are granted or not, the name(s) of the person(s) who requested the information; the names of the additional parties to whom the receiving party may disclose the information on behalf of the University; and their legitimate interests in the information. Records of requests and disclosures will not be maintained for: (1) requests made by the student; (2) requests for which the student has given written consent; (3) requests made by school officials with legitimate educational interests; or (4) requests for directory information.
The record of requests and disclosures may be inspected by the student, by school officials responsible for the custody of the records, and by federal and state officials for the purpose of auditing record keeping procedures.
A student may request amendment of the content of an education record on the grounds that the record is inaccurate, misleading, or otherwise in violation of the privacy of the student. If the University does not amend the record as requested, then the student has an opportunity for a hearing. No hearing under this policy shall be granted for challenging the underlying basis for a grade; however, the accuracy of the recording of the grade could be challenged. The following procedure for challenging the content of an education record shall apply:
- The student has the right to receive a brief explanation and interpretation of the record in question from the respective record custodian.
- The custodian of the challenged education record, after reviewing the record with the student, may settle the dispute informally with the student with regard to the deletion or modification of the education record. The custodian shall make a decision within a reasonable amount of time and shall notify the student of the decision.
- In the event the custodian disapproves the student's request to delete or modify the record in question, the student shall be notified by the custodian, in writing, of the decision and of the student's right to a formal hearing upon the request.
- All requests for formal hearings by the student shall be directed to the Office of the Vice Provost for Student Affairs (Lawrence/Edwards) or to the Office of the Vice Chancellor of Student Services (Medical Center), and shall contain a concise written statement of the specific facts constituting the student's claim.
- The hearing shall be conducted by a University staff member (Hearing Officer) who does not have a direct interest in the outcome of the challenge and who shall be appointed by the Vice Provost for Student Success (Lawrence/Edwards), Dean of Students (Medical Center). The hearing shall be held within a reasonable time of receipt of the student's request and the student shall be notified reasonably in advance by the hearing officer of the date, place and time of the hearing.
- At the hearing, the student shall be afforded a full and fair opportunity to present evidence relevant to the student's claim and may, at personal expense, receive assistance or be represented by any individuals. A recording of the hearing will be made, and a copy of the recording will be made if requested and the cost of making the copy will be paid by the requester of the copy. No transcript of the recording will be made.
- Based solely on the evidence presented at the hearing and within ten (10) working days of the hearing, the hearing officer shall make a written recommendation to the Vice Provost for Student Success(Lawrence/Edwards), or the Dean of Students (Medical Center) or designee together with written findings of fact concerning the student's request. Within an additional fourteen (14) working days of receipt of the hearing officer's report, the Vice Provost for Student Success (Lawrence/Edwards), Dean of Students (Medical Center) or designee shall notify the student in writing of the decision. The decision must include a summary of the evidence and the reasons for the decision.
- In the event the decision is adverse to the student's request, the student shall be notified of the opportunity to place with the education record a summary statement commenting upon the information in the records and/or setting forth any reason for disagreeing with the decision. If the questioned document is released to a third person, the student's summary statement shall accompany the release of any such information. The summary information shall be maintained for as long as the contested record is maintained. There is no appeal of the decision within the University.
- If a student challenge to the content of a given record is successful, the University shall amend the education record accordingly and so inform the student in writing. Upon the student's specific written request to the Vice Provost for Student Success (Lawrence/Edwards), or Dean of Students (Medical Center), the University shall make a reasonable effort to contact student-designated third persons who have received copies of the previous record to inform them of the change that has been made.
If a student believes that the University is not in compliance with the KU Student Record Policy and/or the Family Educational Rights and Privacy Act (FERPA), the student should check first with the office involved and/or the Office of the Vice Provost for Student Success Lawrence/Edwards campus, or the Office of the Dean of Students (Medical Center).
If a student wishes to file a complaint with the federal government concerning the University's failure to comply with FERPA, the student must submit the complaint, in writing, to the Family Policy Compliance Office, U.S. Department of Education, 400 Maryland Avenue, SW, Washington, D.C. 20202-5920, (http://www.ed.gov/policy/gen/guid/fpco/ferpa/students.html). The Family Policy Compliance Office will notify the student and the University when the complaint has been received. They will investigate the complaint, and may require further information. Following its investigation, they will provide written notification of its findings and basis for such findings. In the event the University is found not to be in compliance, it will be afforded the necessary time to comply. If it does not then comply, additional action may be taken by the Family Policy Compliance Office. For guidelines concerning this complaint procedure, see 34 CFR Paragraph 99.64 and the subsequent regulations of the Family Educational Rights and Privacy Act.
Faculty, staff and/or student employees who violate this University policy may be subject to disciplinary action for misconduct and/or performance based on the administrative process appropriate to their employment.
Students who violate this University policy may be subject to proceedings for non-academic misconduct based upon their student status.
Faculty, staff, student employees and/or students may also be subject to the discontinuance of specified information technology services based on the policy violation.
Office of the Registrar
KU Visitor Center
1502 Iowa Street
Lawrence, KS 66045
Attendance: Attendance at the University of Kansas is considered to begin on the announced first day of classes for the initial semester (Fall, Spring, or Summer) for which a person is enrolled in one or more classes, and shall include any person “attending” on campus or by any electronic means (including for example webinar, correspondence, and the like) as prescribed by the class requirements. Non-credit bearing courses, workshops, seminars, etc. developed, targeted to external audiences or consisting solely of minor children shall not be considered in attendance for the purposes of this policy, although information related these audiences should be treated in accordance with appropriate data handling and privacy policies and procedures.
Consent: Some University systems incorporate electronic provision of consent within the system (e.g., advising tool, on-line transcript request system, etc). In these systems, proper authentication will require a login with the KU Student on-line ID, secure password and positive action to indicate release. Such authentication shall constitute consent. In all other cases, consent shall be in writing and shall be signed and dated by the student giving consent. For both written and electronic categories, the consent shall include (a) specification of records to be released; (b) purposes of such release; and (c) parties or class of parties to whom such records may be released.
Custodian of Student Records: Except as otherwise designated in this policy, the head of each academic or administrative unit is responsible for the education records within the unit. A list of custodians of primary records is found in the document “Student Record Policy Records Custodians”. In all cases of subpoenas or court orders, these custodians should consult General Counsel. For all interpretations of this policy and/or if there is a question concerning privacy of the Education Record, these custodians should refer to the University Registrar (Lawrence/Edwards campus)/Registrar (Medical Center).
Directory Information: The student related directory information is defined by the University of Kansas as: name; current address and telephone number; permanent address and telephone number; e-mail address (except as limited below); level and school; month and day of birth; major field of study; enrollment status (full-time; half-time; less than half-time); dates of attendance; degrees, honors and awards received; the most recent previous educational institution attended by the student; participation in officially recognized activities and sports (including participation status); and height and weight of members of athletic teams. For purposes of official University news releases, or conducting University business and advancement, student photographs and parent name, address, telephone number and e-mail are also defined as directory information. In order to protect individual privacy, a student’s email address is not considered “directory information” where requests by non-university organizations for multiple e-mail addresses are made. The name(s), position(s), length of service and/or courses taught may be disclosed for student employees. Information not included above is not directory information and thus is to be maintained as confidential information; this includes but is not limited to Social Security Numbers and KU ID numbers.
Disclosure: Permitting access to or the release, transfer, or other communication of any part or all of the education records of the student or the personally identifiable information contained therein, orally, in writing, by any electronic means, or by any other means to any party. Disclosure does not include the return of the Education Record from an instructor to the student, so long as the student may inspect the Education Record in the possession of the instructor. Release of information from education records as required or permitted by law will not be considered a disclosure under this policy.
Education Records: Those records that are directly related to a student and that are maintained by the University or by a party acting for the University. A record means any information recorded in any way, including, but not limited to, handwriting, print, tape, film, microfilm, microfiche, computerized and/or digitized storage.
Records described in items 1-5 below are excluded from the category of ''education records,'' therefore, the law does not guarantee the right of student access to the following:
- Records created by and kept in the sole possession of an individual staff member that are not revealed to any other individual except to a person who might temporarily substitute for the original staff member.
- Medical and psychological records that are maintained only in connection with provision of treatment to the student and that are not available to persons other than those providing treatment except that such records may be personally reviewed by a physician or other appropriate professional of the student's choice and with the student's written consent.
- Records that contain only information relating to a person after that person is no longer a student at the University. An example would be information collected by the University or the Alumni Association pertaining to the accomplishments of an alumnus/alumna.
- Employment records of any person if maintained in the normal course of business and used only for purposes relating to the employment, unless the person is employed at the University only because of status as a student. In such cases, student employment records are education records and are covered by this policy.
- Records of the KU Public Safety Office created and maintained by that department for the purpose of law enforcement.
Electronic Authentication System: At the University of Kansas electronic authentication consists of a unique on-line ID and a strong password intended to be known only by the user. The e-signature is used to electronically access systems at the University. It is NOT communicated in written or oral form to permit access and/or signify consent.
Legitimate Educational Interests: The interest of University personnel who have a demonstrably legitimate need to review records in order to fulfill their official professional responsibilities. Such responsibilities must involve the University in its primary educational and scholarly functions and/or secondary administrative functions of maintaining property, disbursing funds, keeping records, providing living accommodations and other services, sponsoring activities, recognizing student educational achievements, and protecting the health and safety of persons or property in the University community. If a question arises concerning the legitimacy of a request to review records, such questions shall be referred to the University Registrar (Lawrence/Edwards) or Registrar (Medical Center).
Parent: Includes a parent, a guardian, or an individual acting as a parent of a student in the absence of a parent or guardian.
Personally Identifiable Information: Includes the name of the student, the student's parent or other family members, the address of the student or parent, personal identifiers such as social security or student numbers, personal characteristics or information requested by a person whom the University reasonably believes knows the identity of the student to whom the education record relates. In cases where aggregate data is released, this definition includes any cell sizes with five or fewer students.
School Official: Faculty, staff, student employees, or committees (when the members of the committee are appointed or elected to an officially constituted committee) who perform a function or task on behalf of, and at the request of, the University, its faculty, colleges, schools, departments or units are School Officials for purposes of this policy. Additionally, agencies, organizations, contractors, consultants, volunteers and other outside service providers officially acting on behalf of the University and subject to the control of the University and that provide services, functions or conducts research the University would otherwise perform itself are considered school officials for the purposes of this policy (e.g., accountants, attorneys, degree or transcript services, testing services, computer security services, etc).
Student: For purposes of this policy, an eligible student is anyone who is currently attending or who has previously attended the University of Kansas. with the following exceptions:
- A person who has applied for admission to, but has never been in attendance at, a component unit of the University (such as the various schools and colleges of the University), even if that individual is or has been in attendance at another component unit of the University, is not considered to be a student with respect to the component to which an application for admission has been made.
- A minor child who is taking non-credit classes, workshops, seminars, clinics, camps etc. designed and targeted exclusively for minor children.
- Attendees at conferences, seminars, workshops or similar activities for which University academic credit is not conferred.
See also “Attendance”.
12/10/2021: Updated internal link.
02/20/2020: Fixed broken link.
08/15/2018: Updated the campus section to match policy statement.
07/11/2016: Updated to remove gendered pronouns.
10/27/2014: Updated references to Health Services in 4.V. to read "Watkins Health Services", consistent with recent unit name change.
10/16/2014: Policy formatting cleanup (e.g., bolding, spacing).
06/26/2013: major revisions in formatting and content to comply with FERPA amendments, implementation of Alcohol Notification Policy and relocation to Policy Library.
(11/29/05 Contact information updated in "Primary Records Custodians and Locations on Lawrence Campus" section.)
(07/28/04 Contact information updated in "Primary Records Custodians and Locations on Lawrence Campus" section.)
(05/26/04 Contact information updated in "Primary Records Custodians and Locations on Lawrence Campus" section.)
Revised Policy approved July 2001
Original adoption date January 1, 1975