FERPA - Family Educational Rights and Privacy Act

FERPA - Family Educational Rights and Privacy Act

Howard University promotes interactive problem-solving and open communication between students and their families while protecting the privacy of student education records. The Family Educational Rights and Privacy Act (FERPA) is the federal law that governs access to and disclosure of student education records and affords students specific rights regarding those records. FERPA generally prohibits the disclosure of personally identifiable information from a student's education records without the student's written consent, except in certain limited circumstances authorized by law.

At Howard University, FERPA is implemented through the University's Student Privacy Rights Policy and related procedures and applies to all current and former students regardless of age.

Additional Resources

Learn More About FERPA
Your Rights Under FERPA

As a Howard University student, you have the right to:

Inspect and Review Your Education Records

You can review your education records maintained by the University within 45 days of submitting a valid request.

Request Amendments

Request correction of education records that you believe are inaccurate, misleading, or otherwise in violation of your privacy rights. 

Control Disclosure of Your Education Records

You may provide or revoke consent for the disclosure of information from your education records, except where FERPA allows disclosure without consent.

Restrict Disclosure of Your Directory Information

Directory information is information the University is legally permitted to disclose without prior student consent. However, you have the right to request that Howard University not disclose your directory information to parties outside of the University.

File a Complaint Regarding Alleged FERPA Violations

You have the right to file a complaint with the U.S. Department of Education if you believe your FERPA rights have been violated. You also have the right to file a report internally via the Howard University Ethics & Compliance Hotline.

Accessing Your Records

Students may request to inspect and review their education records by submitting a written request to the office maintaining the record. The request should identify the specific record(s) being sought. Howard University will provide access within 45 days of receiving a valid request, as required by FERPA. Questions regarding access requests may be directed to the Office of the Registrar.

FERPA and Student Health Records

Student health-related records maintained by Howard University healthcare providers, such as the Student Health Center or the University Counseling Service, are generally subject to FERPA rather than HIPAA (the Health Insurance Portability and Accountability Act, which governs the privacy of protected health information) when maintained by the educational institution. 

Howard University Hospital vs. University Health Services. Note that Howard University Hospital is a separate healthcare provider and a HIPAA-covered entity. When the Hospital provides treatment to a Howard student as a patient, the resulting medical records are generally governed by HIPAA when maintained by the Hospital. By contrast, student health-related records maintained by University-operated student health or counseling services are generally governed by FERPA when they are maintained by the University and are considered “treatment records” under FERPA when they are made or maintained by recognized health professionals solely for treatment purposes and disclosed only to treatment providers.

However, if treatment information is shared outside the treatment context, portions of those records may become subject to student access rights under FERPA. 

Questions regarding health information privacy should be directed to the appropriate healthcare provider or University Privacy Office in the Office of Audit & Compliance at Privacy@Howard.edu. 

FERPA and Parent Access to Student Information

When a student enrolls in a postsecondary institution (i.e., a college or university), the FERPA rights transfer from the parent to the student, regardless of age. As a result, parents generally do not have automatic access to a student's education records. However, Howard University may disclose information to parents when:

  • The student grants permission through BisonHub.
  • The parent demonstrates that the student is a dependent for federal income tax purposes.
  • A health or safety emergency exists.
  • Another FERPA exception applies.

Third-Party Permissions

Authorizing Third-Party Permissions in BisonHub

Students who wish to authorize parents, guardians, spouses, or other individuals to access information from their education records must establish permissions through BisonHub (Workday Student). Using the Manage Third-Party Permissions function, students may:

  • Identify approved third parties.
  • Specify what information may be shared.
  • Modify permissions at any time.
  • Revoke access whenever desired.

Consent remains in effect until modified or withdrawn by the student through BisonHub. Any permissions established under previous student information systems or paper FERPA releases must be recreated in BisonHub. 

School Officials & Legitimate Educational Interest

FERPA permits Howard University to disclose education records without student consent to school officials who have a legitimate educational interest in the information. 

School Official

A school official may include the following individuals, provided they are performing work on behalf of Howard University, and are subject to appropriate confidentiality requirements:

  • Faculty members
  • Administrators
  • Staff members
  • Trustees
  • Contractors, consultants, volunteers, or service providers performing institutional functions

Legitimate Educational Interest

A school official has a legitimate educational interest when access to student information is necessary in order to:

  • Perform assigned professional responsibilities.
  • Support a student's educational experience.
  • Provide advising, counseling, academic, safety, administrative, financial, compliance, or operational services.
  • Fulfill institutional, legal, or accreditation obligations.

In all cases, access to student records shall be limited to information required to perform official duties.

Directory Information

FERPA allows institutions to designate certain student information as "directory information," which may be disclosed without prior student consent unless the student restricts such disclosure. Howard University may designate the following as directory information:

  • Name
  • Address
  • Telephone number
  • University email address
  • Photograph
  • Date and place of birth
  • Major field of study
  • Dates of attendance
  • School or college
  • Enrollment status
  • Credit hours earned
  • Degrees and awards received
  • Honors and awards
  • Participation in officially recognized activities and sports
A pair of students in Howard-brand sweaters happily conversing on Howard University campus.

Restricting Disclosure of Directory Information

Students may request that directory information not be disclosed by updating their privacy settings in BisonHub.

To restrict directory information:

  1. Log into BisonHub.
  2. Open the Manage My Privacy Settings task.
  3. Select the option to withhold directory information.
  4. Submit and save your preferences.

Students should carefully consider the implications of restricting directory information. Limiting disclosure may affect the University's ability to verify enrollment, degrees, honors, participation in activities, and similar information to employers, scholarship organizations, or others. 

Annual Deadline: Students wishing to prevent directory information from being published in official commencement materials, directories, or other institutional publications should submit their request before the deadline established and announced each academic year by the Office of the Registrar.

Additional Resources

Who Should I Contact?

For questions regarding FERPA, education records, third-party disclosure permissions, directory information restrictions, or record access requests, please contact:

Office of the Registrar
Email: registrar@howard.edu
Website: Howard University Registrar

For questions or concerns regarding privacy compliance, students may also contact the Privacy Office in the Office of Audit & Compliance at Privacy@Howard.edu.

Filing a FERPA Complaint

Students who wish to report a FERPA compliance violation may file a complaint with:

Student Privacy Policy Office
U.S. Department of Education
400 Maryland Avenue SW
Washington, DC 20202

Additional information is available through the U.S. Department of Education's FERPA website:

Students also have internal reporting options available to them to resolve complaints and can report concerns about potential FERPA violations via the Howard University Ethics & Compliance Hotline. The Hotline is administered through an independent company and is available 24/7 via toll-free phone number or online form.

Requesting Amendment of Records

Students who believe that information contained in their education records is inaccurate, misleading, or otherwise in violation of their privacy rights may request that the University amend the record.

To request an amendment:

  1. Submit a written request to the office maintaining the record.
  2. Clearly identify the portion of the record being challenged.
  3. Explain why the information is believed to be inaccurate or misleading.

If the University denies the request, the student will be informed of the decision and of any hearing rights available under FERPA. 

FERPA Frequently Asked Questions

+ Q: What can I do if I want faculty and staff to be able to talk to my parents about my education record?

A: Students who wish to provide access for third party individuals to access their educational record information must update permissions in BisonHub. Student should access BisonHub, add the contact information for the family member/friend, and then manage permissions to the family/friend as a "third party" and grant access to the relevant information desired. Students can access step-by-step directions on how to complete these steps by viewing Manage Third-Party Permission Job Aid in Canvas.

+ Q: Must the access be granted online?

A: Yes. The U.S. Department of Education passed legislation allowing an electronic consent for the release of records. Howard University uses the Manage Third Party Permissions feature in BisonHub (powered by Workday). Any previous submissions of FERPA forms must be completed again.

+ Q: Once l update my consent, how long is it in effect?

A: Consent will remain in effect until a student updates their third-party permissions in BisonHub (powered by Workday). 

+ Q: What should I do if I want my "directory information" handled as confidential information?

A: Students may choose at any time to have their directory information marked confidential by accessing the Manage My Privacy Settings task in BisonHub (powered by Workday). Here you can indicate whether you wish to have your directory information made public or not, and whether the University can share directory information with outside entities. 


Please carefully consider the consequences of a decision to withhold directory information. The University will honor your request to withhold directory information from non-institutional persons or organizations. Regardless of the effect upon you, Howard assumes no liability as a result of honoring your instructions to withhold this information.

Q: I completed the hard copy/digital FERPA form for your legacy student information system? Do I have to submit another form for your new student information system?

A: Yes. Any previous FERPA consent that was granted using the old FERPA release form must be submitted again in our new student information system. The process of managing third party permissions in BisonHub (powered by Workday) is quick and easy, and does not require intervention by a Howard staff member.