FERPA

FERPA Protections Take Effect for New Students on Monday, Aug. 26

Anonymous — Thu, 22 Aug 2024 06:00:00 +0000

FERPA Protections Take Effect for New Students on Monday, Aug. 26 Anonymous (not verified) Thu, 08/22/2024 - 00:00 Office of the Registrar

Who Received This Email?

We sent this email at 7 p.m. on Wednesday, Aug. 21, 2024, to ŷ��ڱ��Ƶ Boulder faculty, staff and temporary employees.

Dear faculty and staff,

Student data privacy is everyone's responsibility. The Family Education Rights and Privacy Act (FERPA) and the University of ŷ��ڱ��Ƶ Boulder have set forth guidelines related to the disclosure of and access to student education records maintained by the university.

FERPA protections go into effect for incoming Fall 2024 students on Monday, Aug. 26, and remain in effect for continuing and returning students.

Consider attending the online FERPA Training for faculty and staff on Sept. 26 from 12:30–2 p.m.

Education Records

Any record that directly relates to a student and is maintained by ŷ��ڱ��Ƶ (regardless of medium) is classified as an education record. Education records include:

Directory information, which may generally be disclosed to a third party without the written consent of the student, as long as the student hasn't established full privacy. This includes items such as student name, major(s) and minor(s), and participation in officially recognized activities or sports (see Directory Information for a complete list).
Nondirectory information, which is personally identifiable information that may not be disclosed to anyone, including parents, without documented student consent. School officials, including faculty and staff, may only access nondirectory information if they have a legitimate educational interest. This includes sensitive data, such as SSNs, grades and financial information, and class recordings (see below).

Remote & Online Classes

Recordings of lectures or class meetings are considered education records if students' names or likenesses are displayed or disclosed. You may share these recordings with the class, but not with others without documented consent from each student identified in the recording.

When offering classes through Zoom, plan a secure meeting by requiring authentication and setting a meeting password. Before sharing your screen in class, close all documents or systems displaying personally identifiable information. Accidental sharing of such information is a violation of FERPA.

Students on full privacy (see below) are not treated differently than other students within the physical or virtual classroom. Their name, image and email address may appear on screen and in your learning management system, and you may call on them by name.

Letters of Recommendation

Any disclosure of nondirectory student information (e.g., class performance, grades, abilities, background) to a third party in letters of recommendation or reference calls requires prior documented consent from the student. For full details and a student release form, see Release of Student Recommendations.

Accommodations Related to Disabilities

Students’ disabilities are protected under FERPA. When contacting students in your class to discuss accommodations related to disabilities, you must email students individually or bcc each student email address to avoid a FERPA violation. If you have any questions, please contact Disability Services.

Artifical Intelligence

AI development, its uses and tools are rapidly evolving. AI users at ŷ��ڱ��Ƶ Boulder should stay current with campus policies and guidance regarding student data privacy, compliance, security and other AI considerations and implications. See Artificial Intelligence at ŷ��ڱ��Ƶ Boulder.

Student Privacy Options & University Business Practices

Security Passphrase: Required for verifying the identity of a student who cannot present a photo ID or who is contacting the university by phone. See Confirming a Student's Identity.
FERPA Consent to Release: The online process to authorize release of nondirectory education records to a third party. See FERPA Consent to Release.
ŷ��ڱ��Ƶ Guest Access: Allows students to grant read-only online access to select third parties. If a student has established ŷ��ڱ��Ƶ guest access for a third party, but not FERPA consent to release, you cannot release any FERPA-protected information. See ŷ��ڱ��Ƶ Guest Access.
Full Privacy: An option for students to restrict release of their directory information. These students are identified in Campus Solutions with a red "private" label. If asked for information about a student on full privacy, school officials must tell the requester, "Due to data privacy policies, we are unable to respond to your request."

Advisors may check student privacy settings in Buff Portal Advising or Campus Solutions. Instructors may do so through their class or grade rosters in Myŷ��ڱ��ƵInfo's Faculty Center.

Don't hesitate to contact the Office of the Registrar with questions or to request departmental FERPA training. Additional FERPA information is available in Skillsoft and on the Office of the Registrar and U.S. Department of Education websites.

Office of the Registrar | University of ŷ��ڱ��Ƶ Boulder
303-492-6970 | registrar@colorado.edu

The protection of student privacy is everyone's responsibility. The Family Education Rights and Privacy Act (FERPA) and the University of ŷ��ڱ��Ƶ Boulder have set forth guidelines related to the disclosure of and access to student education records maintained by the university.

Off

Traditional

White

FERPA Protections Take Effect for New Students on Tuesday, Jan. 16

Anonymous — Fri, 12 Jan 2024 07:00:00 +0000

FERPA Protections Take Effect for New Students on Tuesday, Jan. 16 Anonymous (not verified) Fri, 01/12/2024 - 00:00 Office of the Registrar

Who Received This Email?

We sent this email at 7 p.m. on Thursday, Jan. 11, 2024, to ŷ��ڱ��Ƶ Boulder faculty, staff and temporary employees.

Dear faculty and staff,

FERPA protections go into effect for incoming Spring 2024 students on Tuesday, Jan. 16, and remain in effect for continuing and returning students.

Education Records

Any record that directly relates to a student and is maintained by ŷ��ڱ��Ƶ (regardless of medium) is classified as an education record. Education records include:

Directory information, which may generally be disclosed to a third party without the written consent of the student, as long as the student hasn't established full privacy. This includes items such as student name, major(s) and minor(s), and participation in officially recognized activities or sports (see Directory Information for a complete list).
Nondirectory information, which is personally identifiable information that may not be disclosed to anyone, including parents, without documented student consent. School officials, including faculty and staff, may only access nondirectory information if they have a legitimate educational interest. This includes sensitive data, such as SSNs, grades and financial information, and class recordings (see below).

Remote & Online Classes

When offering classes through Zoom, plan a secure meeting by requiring authentication and setting a meeting password. Before sharing your screen in class, close all documents or systems displaying personally identifiable information. Accidental sharing of such information is a violation of FERPA.

Students on full privacy (see below) are not treated differently than other students within the physical or virtual classroom. Their name, image and email address may appear on screen and in your learning management system, and you may call on them by name.

Letters of Recommendation

Accommodations Related to Disabilities

Student Privacy Options & University Business Practices

FERPA Training & Resources

Each year, the Office of the Registrar offers a FERPA review and training session that allows faculty and staff to ask questions about specific situations. Visit our training and support page to view upcoming sessions or request departmental training.

Please don't hesitate to contact the Office of the Registrar when questions arise. Additional FERPA information is available in Skillsoft and on the Office of the Registrar and U.S. Department of Education websites.

Office of the Registrar | University of ŷ��ڱ��Ƶ Boulder
303-492-6970 | registrar@colorado.edu

Off

Traditional

White

Language Update for Responding to Full-Privacy Student Inquiries

Anonymous — Thu, 11 Nov 2021 19:25:12 +0000

Language Update for Responding to Full-Privacy Student Inquiries Anonymous (not verified) Thu, 11/11/2021 - 12:25 Registrar Network

In the past, if someone asked a university employee for information about a student on full privacy and didn't immediately volunteer a password/passphrase to confirm their identity/ authorization, the employee was required to tell the requester, "We have no information on that person."

That language is no longer supported by ŷ��ڱ��Ƶ Boulder's Office of General Counsel.

Going forward, counsel requests that we instead reply, "Due to data privacy policies, we are unable to respond to your request."

To learn more, see our step-by-step instructions on how to confirm a student's identity and how to confirm a third party's FERPA consent to release.

If someone asks a university employee for information about a student on full privacy and doesn't immediately volunteer a password/passphrase to confirm their identity/ authorization, the employee must now tell the requester, "Due to data privacy policies, we are unable to respond to your request."

Off

Traditional

White

Approved Procedures for Verifying Identities & Third-Party Authorizations

Anonymous — Wed, 29 Sep 2021 06:00:00 +0000

Approved Procedures for Verifying Identities & Third-Party Authorizations Anonymous (not verified) Wed, 09/29/2021 - 00:00 Office of the Registrar

As outlined in our August email to faculty and staff, ŷ��ڱ��Ƶ Boulder employees are obligated to comply with FERPA, the federal law that governs the protection and disclosure of student educational records.

Before disclosing any sensitive information to an unfamiliar student or third party (e.g., parent, guardian, sponsor), follow our instructions to confirm a student's identity or confirm a third party's FERPA authorization.

In particular, be sure to:

Verify a student's security passphrase if they can't present a photo ID. If they haven't set a passphrase yet, refer them to Buff Portal to do so rather than using an alternate method to verify their identity.
Verify a third party's authorization phrase. If they're unable to provide their authorization phrase, there's no other way to confirm their identity or FERPA authorization over the phone. The third party will need to reach out to the student to ask what authorization phrase the student set up for them.

Note: If a third party tells you they've logged in to a ŷ��ڱ��Ƶ Boulder system using a student's credentials, please inform them that campus computing policies prohibit students from sharing their login information.

Off

Traditional

White

Action Required: Mandatory FERPA Recertification for ŷ��ڱ��Ƶ-SIS Access (Targeted Message)

Anonymous — Thu, 13 May 2021 18:45:58 +0000

Action Required: Mandatory FERPA Recertification for ŷ��ڱ��Ƶ-SIS Access (Targeted Message) Anonymous (not verified) Thu, 05/13/2021 - 12:45 Nikki Moore , Office of the Registrar

Who Received This Email?

We sent this email on Thursday, May 13, 2021, to ŷ��ڱ��Ƶ-SIS users who last took the ŷ��ڱ��Ƶ: FERPA online training course in 2015.

Dear [first],

Our records indicate that it's been three or more years since you passed the ŷ��ڱ��Ƶ: FERPA online training course.

To retain your ŷ��ڱ��Ƶ-SIS access, you must retake this course and obtain a score of 80 or higher. If you fail to meet this requirement, your ŷ��ڱ��Ƶ-SIS access will be revoked.

For step-by-step instructions on how to complete this course, visit ŷ��ڱ��Ƶ-SIS Access.

Please reply to this email to let us know once you’ve successfully met the FERPA recertification requirement, or to inform us that you no longer require this access.

With kind regards,

Nikki Moore (she/her/hers)

Security and Access Coordinator

Office of the Registrar

University of ŷ��ڱ��Ƶ Boulder

Online Office of the Registrar

Office of the Registrar | University of ŷ��ڱ��Ƶ Boulder
303-492-6970 | registrar@colorado.edu

Our records indicate that it's been three or more years since you passed the ŷ��ڱ��Ƶ: FERPA online training course. To retain your ŷ��ڱ��Ƶ-SIS access, you must retake this course and obtain a score of 80 or higher.

Off

Traditional

White

Action Required: Mandatory FERPA Recertification for ŷ��ڱ��Ƶ-SIS Access (Targeted Message)

Anonymous — Fri, 30 Apr 2021 06:00:00 +0000

Action Required: Mandatory FERPA Recertification for ŷ��ڱ��Ƶ-SIS Access (Targeted Message) Anonymous (not verified) Fri, 04/30/2021 - 00:00 Nikki Moore , Office of the Registrar

Who Received This Email?

We sent this email on Friday, April 30, 2021, to ŷ��ڱ��Ƶ-SIS users who last took the ŷ��ڱ��Ƶ: FERPA online training course in 2014.

Dear [first],

Our records indicate that it's been three or more years since you passed the ŷ��ڱ��Ƶ: FERPA online training course.

To retain your ŷ��ڱ��Ƶ-SIS access, you must retake this course and obtain a score of 80 or higher. If you fail to meet this requirement, your ŷ��ڱ��Ƶ-SIS access will be revoked.

For step-by-step instructions on how to complete this course, visit ŷ��ڱ��Ƶ-SIS Access.

Please reply to this email to let us know once you’ve successfully met the FERPA recertification requirement, or to inform us that you no longer require this access.

With kind regards,

Nikki Moore (she/her/hers)

Security and Access Coordinator

Office of the Registrar

University of ŷ��ڱ��Ƶ Boulder

Online Office of the Registrar

Office of the Registrar | University of ŷ��ڱ��Ƶ Boulder
303-492-6970 | registrar@colorado.edu

Off

Traditional

White

FERPA

FERPA Protections Take Effect for New Students on Monday, Aug. 26

Education Records

Remote & Online Classes

Letters of Recommendation

Accommodations Related to Disabilities

Artifical Intelligence

Student Privacy Options & University Business Practices

Off

FERPA Protections Take Effect for New Students on Tuesday, Jan. 16

Education Records

Remote & Online Classes

Letters of Recommendation

Accommodations Related to Disabilities

Student Privacy Options & University Business Practices

FERPA Training & Resources

Off

Language Update for Responding to Full-Privacy Student Inquiries

Off

Approved Procedures for Verifying Identities & Third-Party Authorizations

Off

Action Required: Mandatory FERPA Recertification for ŷ���ڱ���Ƶ-SIS Access (Targeted Message)

Off

Action Required: Mandatory FERPA Recertification for ŷ���ڱ���Ƶ-SIS Access (Targeted Message)

Off

Action Required: Mandatory FERPA Recertification for ŷ��ڱ��Ƶ-SIS Access (Targeted Message)

Action Required: Mandatory FERPA Recertification for ŷ��ڱ��Ƶ-SIS Access (Targeted Message)