The Federal Privacy Law Standing Between Your Conduct File and the Outside World
Key Takeaways: FERPA treats college disciplinary files as protected "education records" that Illinois institutions cannot release without written consent. Rights transfer to the student at age 18 or upon enrollment. Protection covers all media including notes, emails, and security video, and applies to private Illinois colleges receiving federal funding. Key exceptions: school officials with legitimate educational interests may access files; health/safety emergencies permit disclosure; final results may be shared with alleged victims in violent or sex offense cases; campus law enforcement records generally fall outside FERPA. Illinois law adds confidentiality requirements. Because FERPA operates through administrative enforcement rather than private lawsuits, a favorable outcome preventing transcript notation often provides the strongest protection.
When an Illinois college student faces allegations of academic dishonesty, conduct violations, or sexual misconduct, a primary concern is permanent exposure: Will employers see this? Graduate programs? Parents? The Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g, establishes that college disciplinary files maintained by the institution qualify as protected "education records" and cannot be released without written consent, subject to statutory exceptions. FERPA is enforced through the U.S. Department of Education; the Supreme Court held in Gonzaga University v. Doe, 536 U.S. 273 (2002), that FERPA does not create individually enforceable rights under 42 U.S.C. § 1983.
If you or your student has received a notice of investigation from an Illinois university, the attorneys at Leonard Trial Lawyers are prepared to help protect both the outcome and the record. Call 312-380-6559 or request a free consultation to discuss your situation.
What Counts as an Education Record Under FERPA
FERPA’s threshold question is who maintains the record and whether it relates directly to a student. The U.S. Department of Education explains that education records under FERPA are records "directly related to a student and that are maintained by an educational agency or institution." This includes grades, transcripts, financial information, and student discipline files. Express exclusions exist for certain law enforcement unit records, employment records unrelated to student status, and records kept in sole possession of the maker.
Format is not central to the analysis. Covered information may be recorded in any medium: handwriting, print, computer media, videotape, audiotape, film, or microfilm. An investigator’s interview notes shared with conduct staff, emails among conduct officers, security video, and conduct management system entries may all qualify as protected records under 20 U.S.C. § 1232g(a)(4)(A) and 34 C.F.R. § 99.3. Notes kept in sole possession of their maker fall outside the definition until disclosed.
Private Illinois Colleges Are Covered Too
Students at DePaul, Loyola, Northwestern, and other private institutions sometimes assume FERPA applies only to public universities. This is incorrect. FERPA applies to educational agencies and institutions receiving funds under programs administered by the U.S. Department of Education. Most private postsecondary institutions receive such funding through Title IV federal student aid and are therefore subject to FERPA, resulting in broad coverage across Illinois campuses.
Who Actually Controls FERPA Student Disciplinary Records
Once a student turns 18 or enrolls at a postsecondary institution, rights belong to the student, not the parents. The student becomes an "eligible student" and FERPA rights transfer from parent to student. This surprises many Illinois families, particularly parents paying tuition.
The consequence is immediate. A university will not discuss a pending conduct matter with a parent unless the student signs written consent or an exception applies, such as disclosure to parents of a dependent student for federal tax purposes, in a health or safety emergency, or regarding certain alcohol or controlled substance violations by students under 21. Institutions are permitted but not required to use these exceptions. Families wanting coordinated decision-making should address consent early with counsel, rather than signing broad releases authorizing unintended disclosures.
💡 Pro Tip: Before signing any release, read exactly which records it covers, who may receive them, and for how long. A narrowly drafted consent serves a student’s interests better than a blanket authorization.
The Exceptions That Limit Disciplinary Record Confidentiality
FERPA’s consent requirement is a default rule, not an absolute guarantee. The Congressional Research Service has published a summary of the statutory FERPA exceptions in In Focus IF13155 (Jan. 15, 2026), cataloging circumstances permitting release without written consent.
Two exceptions arise frequently in campus discipline defense. Under 20 U.S.C. § 1232g(b)(1)(A) and 34 C.F.R. § 99.31, institutions may disclose education records to school officials with legitimate educational interests. A separate exception under 34 C.F.R. §§ 99.31(a)(10) and 99.36 permits disclosure in health or safety emergencies involving an articulable and significant threat. In Doe v. Woodford County Board of Education, 213 F.3d 921, 927 (6th Cir. 2000), the Sixth Circuit upheld disclosure under these exceptions.
| Situation | General FERPA Treatment |
|---|---|
| Disclosure to a prospective employer | Requires written consent |
| Disclosure to a school official with a legitimate educational interest | May be permitted without consent |
| Disclosure to a parent of an enrolled college student | Requires consent, subject to exceptions |
| Final results of a proceeding involving alleged violent or non-forcible sex offense | May be disclosed to the alleged victim without consent |
The Serious-Misconduct Exception Accused Students Should Know
A targeted carve-out directly affects students facing serious allegations. A postsecondary institution may disclose the final results of a disciplinary proceeding to the alleged victim of a crime of violence or non-forcible sex offense without the accused student’s consent, regardless of outcome. A related provision permits disclosure of final results to anyone when the institution determines the student committed such an offense and violated institutional rules, limited to the student’s name, the violation found, and the sanction imposed. The scope is limited to final results rather than the full investigative file, but students in Title IX and violence-related matters should assume the outcome may not remain private as to the complainant.
Campus Police Records Sit in a Separate Category
Records created and maintained by a campus law enforcement unit for law enforcement purposes are carved out of FERPA. Federal guidance points to 20 U.S.C. § 1232g(a)(4)(B)(ii) and 34 C.F.R. §§ 99.3 and 99.8, which exclude such records from the definition of education records. The critical nuance: a copy maintained by another institutional office for a disciplinary purpose may itself become an education record, and education records shared with the law enforcement unit do not lose FERPA protection. For students whose campus matter runs parallel to a criminal case, this distinction shapes how information travels between the police report and the conduct file. Our overview of college misconduct defense addresses how these parallel tracks are managed.
How Illinois Law Reinforces Student Privacy Rights
Illinois has layered confidentiality obligations on top of the federal framework. Under the Preventing Sexual Violence in Higher Education Act, 110 ILCS 155/10(2), covered institutions must give students reporting sexual violence clear information about reporting obligations, privacy protections, and the ability to have confidential communications. Institutions must also provide options to report electronically, anonymously, or confidentially. These obligations run primarily to reporting students and operate alongside FERPA’s rules governing records of the accused.
Practical Steps to Protect University Records Privacy During an Investigation
The privacy of a conduct file is easiest to protect before disclosures happen. Students and families navigating a college misconduct case should:
- Request a copy of the institution’s conduct policy and FERPA notice in writing.
- Avoid signing broad consent forms without counsel review.
- Ask the institution, in writing, whether a notation will appear on the transcript and under what conditions it may be removed.
- Preserve copies of communications, since institutional retention practices vary.
- Assume internal circulation among school officials may occur lawfully, and calibrate written statements accordingly.
Sanctions, not just disclosure, drive long-term consequences. A suspension notation on a transcript may affect transfer applications, graduate admissions, and professional licensing years later. Our discussion of university disciplinary proceedings examines the procedural considerations that may shape those outcomes.
💡 Pro Tip: If a criminal investigation is running alongside the campus process, anything a student says to a conduct investigator may have consequences beyond the hearing room. Counsel should evaluate the sequencing of both proceedings before any statement is given.
Frequently Asked Questions
1. Can my parents access my college disciplinary file without my permission?
Generally no. FERPA rights transfer to the student upon turning 18 or enrolling at a postsecondary institution. Exceptions exist, including disclosure to parents of a tax-dependent student, in health or safety emergencies, or regarding certain alcohol and drug violations by students under 21.
2. Will a future employer see my campus disciplinary record?
Generally, an institution may not release a disciplinary record to an employer without written consent. More common exposure comes from transcript notations and application questions requiring self-disclosure.
3. Does FERPA prevent my university from sharing my file internally?
Not typically. Under 20 U.S.C. § 1232g(b)(1)(A) and 34 C.F.R. § 99.31, disclosure to school officials with legitimate educational interests may occur without consent.
4. Are campus police reports protected the same way as my conduct file?
Generally no. Records created and maintained by a law enforcement unit for law enforcement purposes are excluded from FERPA’s definition of education records, though a copy maintained by another institutional office for disciplinary action may be treated as protected.
5. Does FERPA give me a right to challenge what is in my record?
FERPA provides eligible students the right to inspect and review their education records and to seek amendment of records they believe are inaccurate or misleading. This amendment right generally cannot contest the substance of a grade or disciplinary decision itself, so it is not a substitute for challenging findings through the institution’s appeal process.
Privacy Is Only Half the Battle in a Campus Misconduct Case
FERPA offers meaningful protection for student disciplinary records, but it is a framework of defaults and exceptions rather than a wall. Illinois students benefit from federal education records law together with state confidentiality requirements, yet school officials, complainants in serious-misconduct matters, and law enforcement channels may all lawfully receive information under defined circumstances. One of the most durable forms of protection is a strong defense on the merits, because a favorable outcome may prevent a permanent notation on a transcript.
For more than 30 years, Leonard Trial Lawyers has handled high-stakes matters as genuine trial lawyers, bringing that same strategic and selective approach to students facing university disciplinary proceedings across the Chicago metro area and throughout Illinois. To discuss your matter confidentially in a free consultation, call 312-380-6559 or contact our team today.
Disclaimer: This content is for informational purposes only and is not legal advice. Every case is unique, and results may vary. Consult an attorney about your specific circumstances.
