The Family Educational Rights and Privacy Act (FERPA)

What is FERPA?

FERPA (Family Educational Rights and Privacy Act of 1974) is federal legislation in the United States that protects the privacy of students' personally identifiable information (PII). The act applies to all educational institutions that receive federal funds.


Student: any person who attends or has attended SUNY Morrisville, for the time period in which they were a student. Persons who are not officially enrolled for a particular term but who have a continuing relationship as a student with the College are considered students.

Education Records: any record (in handwriting, print, tapes, film, electronic, or other medium) maintained by and entrusted to SUNY Morrisville or an agent of SUNY Morrisville, which is directly related to a student EXCEPT:

  1. Records which are in the sole possession of the maker, used only as a personal memory aid and which are not accessible to any other person except a substitute.
  2. University Police records created and maintained by University Police for law enforcement purposes.
  3. Medical or psychological records maintained for diagnosis and treatment.
  4. Employee records of student employees.
  5. Information relating to an applicant who does not attend SUNY Morrisville and alumni records about an individual who no longer attends SUNY Morrisville.

Personally Identifiable Information

Information may be shared by a school official in furtherance of her/his duties for educational purposes. When information is requested by non-school officials, the request must be reviewed according to the following criteria. There are two categories of student information relevant to this policy. The first, Personally Identifiable Information, is data that SUNY Morrisville will not share without written consent of the student. The second, Directory Information, is data that may be shared without written consent of the student. Exceptions are possible based on federal and state legal statutes.

Disclosure of Directory Information is discretionary rather than mandatory. SUNY Morrisville has the right to disclose Directory Information to some persons/entities but not others. Requests for student Directory Information that meet a legitimate College interest, and which are in compliance with Information Resources security policies, must be addressed to the College Registrar for approval.

Personally Identifiable Information (consent needed for release)

  • Email addresses that are not assigned by SUNY Morrisville
  • Date and place of birth
  • Social Security number
  • Campus ID or digital identity
  • Citizenship
  • Race
  • Gender
  • Religion
  • Grades including mid-semester evaluations
  • Schedule of classes
  • Withdrawal date
  • Vehicle registration plate number
  • Driver's license number
  • Credit card numbers
  • Criminal record
  • Name(s) of student family members
  • Address(es) of student family members

Directory Information (no consent needed for release)

  • Name
  • Permanent address
  • Telephone number(s) (other than local number as listed in the Campus Information Directory)
  • SUNY Morrisville e-mail address
  • Local telephone number as listed in Campus Information Directory
  • Local Address as listed in Campus Information Directory
  • Individual photograph or electronic image
  • Class standing
  • Age in years (does not include birthdates of individual student)
  • Academic Major
  • School of Study
  • Dates of attendance
  • Degree(s) earned
  • Honors, awards, special recognitions, scholarships
  • Participation in officially recognized college activities, events, and sports
  • Height and weight (student athletes only)
  • Student's most recent educational institution attended

For more information, visit - Family Educational Rights and Privacy Act (FERPA)