FERPA Sole Possession Records: A Simple Breakdown

Student privacy is a big deal, but not all records kept by teachers and school staff are treated the same under FERPA.

Some notes are considered sole possession records—private reminders or reflections that belong only to the person who wrote them. Unlike official student records, these notes aren’t shared with others and don’t fall under FERPA’s protection. This makes them a unique category, often misunderstood by educators and administrators. If mishandled, what was meant to be a private note could accidentally become an official student record, raising legal and ethical concerns.

So, where’s the line between personal notes and official records?

In this blog, we will deep-dive into understanding this distinction and how it affects student privacy and your own documentation practices.

Sole Possession Records Overview

Not all notes taken by educators count as official student records under FERPA. Some fall into a special category called sole possession records—private notes kept by an individual for personal use only.

These records are different from standard educational records because they aren’t shared or used for decision-making about a student. Understanding this distinction is key for educators, students, and administrators to avoid confusion.

Characteristics of Sole Possession Records

At their core, sole possession records are personal notes or observations—quick reminders, reflections, or mental bookmarks educators create to help themselves remember details. Think of them like sticky notes for the brain rather than official records.

For example, a professor might jot down a note about a student’s class participation to recall later when writing a recommendation letter. A teacher might record a student’s progress in a personal notebook to track growth over time. Because these notes are for the creator’s use only, they aren’t subject to FERPA’s protections—as long as they stay private.

Key features of sole possession records include:

1. Creation – Written by an individual (usually a teacher or professor) for personal reference.
2. Accessibility – Not shared with anyone, except a temporary substitute if needed.
3. Purpose – Meant to be memory aids, not formal records used for grading or disciplinary decisions.

However, the moment these records are shared—with colleagues, administrators, or even the student themselves—they lose their sole possession status and become official educational records under FERPA.

This is where educators need to be careful.

Exclusions from the Education Record

FERPA doesn’t cover every single document related to students. Some records, including sole possession records, are specifically excluded from its protections.

These exclusions include:

1. Memory Aids – Notes meant to help the writer remember details, not official documents used in decision-making.
2. Temporary Nature – These records must stay private, meant only for the creator or a substitute.
3. Law Enforcement Records – Certain records held by campus police or security also fall outside FERPA’s scope.

These exclusions matter because they help define what counts as an education record and what doesn’t.

For educators, this means they can keep personal notes without worrying about FERPA violations—as long as those notes stay private. For students, it ensures that official records remain protected, maintaining their right to privacy.

Understanding FERPA

When it comes to student privacy, FERPA—the Family Educational Rights and Privacy Act—is the law that sets the rules. It protects students’ educational records, giving them control over who can access their personal information. But how exactly does it work, and what does it cover? Let’s break it down.

Definition and Purpose

FERPA was passed in 1974 with one clear goal: to keep student records private. It gives students the right to access their records, request corrections, and have a say in how their information is shared.

This law applies to all schools, colleges, and universities that receive federal funding—basically, most public institutions. The core idea is simple: students’ educational records should not be shared without their consent.

Scope of the Act

FERPA isn’t just about grades. It covers a wide range of student records, including:

1. Academic transcripts
2. Enrollment history
3. Disciplinary records
4. Financial aid information

Once a student turns 18 or enters college, their records become theirs alone—parents can’t access them without permission. This can be a big adjustment for families used to being involved in their child’s education.

And what about after graduation? Well, it gets a little complicated. Some records—like transcripts—stay protected under FERPA. But other information, such as degrees awarded, may become public.

Schools must tread carefully, making sure they follow the law while also being transparent about what they can and can’t share.

Distinctions within FERPA Records

Not all records related to students are treated the same under FERPA. Understanding these differences is crucial—not just for educators and administrators but for students, too. Knowing what information is protected, accessible, or restricted can help avoid misunderstandings about privacy rights and record management.

Educational vs. Sole Possession Records

Educational records cover a broad range of student-related information that an institution officially maintains. This includes:

1. Grades and transcripts
2. Enrollment history
3. Disciplinary actions

These records are protected under FERPA, meaning students have a right to access them. In some cases, parents or guardians can also view them—especially before a student turns 18 or if they have given written permission.

Sole possession records, on the other hand, are different. These notes are not part of the student’s official record because they aren’t shared with anyone.

However, if a professor or teacher shows these notes to someone else, they lose their status as sole possession records and become educational records, meaning FERPA protections now apply.

Sole Possession vs. Alumni Records

Another key distinction is between sole possession records and alumni records. Alumni records contain details about former students, such as:

1. Degrees earned
2. Dates of attendance
3. Honors or awards received

Even though these records belong to past students, they still fall under FERPA protections, meaning they must be handled with care. Schools can typically confirm basic information, like whether a student graduated, but more detailed records require student consent before release.

Sole possession records, however, aren’t tied to the institution in the same way. They belong to the individual who created them and aren’t considered official. But there’s a catch—if a personal note identifies a student in a way that could be used as an official record, it no longer qualifies as a sole possession record.

Instead, it becomes an educational record and must follow FERPA privacy guidelines, just like alumni records.

Legal Protections and Limitations

FERPA provides clear guidelines on student privacy, including the special category of sole possession records. While these records give educators a degree of privacy, they also come with certain limitations. Knowing where the line is drawn helps both students and educators understand their rights and responsibilities.

Privacy Expectations

At its core, FERPA protects students’ educational records from unauthorized access. Sole possession records fall outside this category because they are private notes kept by educators for their personal use only. These notes serve as memory aids—quick observations about student progress, classroom behavior, or reminders for future lessons.

A key factor? They must remain private. If an educator keeps notes about a student’s performance but never shares them, those notes do not become official student records. This means that school officials, parents, and even the students themselves cannot access them. Think of it as a professor’s sticky note to themselves—useful for personal reference, but not part of the student’s official file.

This privacy helps teachers and professors document thoughts freely without worrying about external interference.

Legal Accessibility

While sole possession records are generally private, there are exceptions. In some cases, access may be necessary or legally required.

1. Temporary Substitutes: If an educator is absent, a substitute teacher may need access to these records to maintain continuity. However, this access should be limited to necessity and not shared widely.
2. Legal Investigations: If law enforcement or school authorities require access to certain notes for an investigation, those records could be reviewed under specific legal circumstances.
3. Unintentional Disclosure: If an educator accidentally shares a note in a meeting or discussion, it may lose its protected status and fall under FERPA regulations.

The key takeaway? While sole possession records provide privacy, they are not untouchable. Educators must be mindful of how they use and store them, ensuring they remain personal and protected unless absolutely necessary.

Handling of Alumni Records

Once students graduate, what happens to their records? Do FERPA protections still apply? The answer isn’t a simple yes or no. Alumni records hold a unique status, and understanding how they are handled is important for both former students and educational institutions.

Status of Alumni Under FERPA

Under FERPA (Family Educational Rights and Privacy Act), student records are strictly protected while they are enrolled. But once they graduate or leave, their status changes.

1. What stays protected? Information created while the student was enrolled, such as grades, transcripts, and disciplinary records, remains private even after graduation.
2. What’s no longer covered? New information created after graduation, such as alumni contact details, participation in alumni events, or career updates, is not protected under FERPA.

In simple terms, FERPA safeguards don’t completely vanish, but they do loosen. Schools now have more flexibility in handling alumni records, but that doesn’t mean they can freely share everything.

Alumni Records Post-Graduation

After graduation, universities often use alumni records for networking, outreach, and engagement. This can include:

1. Degree Verification – Employers or other institutions may request confirmation of a graduate’s degree. Schools can share this information without requiring FERPA consent.
2. Alumni Newsletters & Events – Institutions can reach out to alumni about reunions, fundraising, or networking opportunities.
3. Public Recognition – Universities may publicly highlight notable alumni achievements, unless the alum has requested privacy.

However, there are still boundaries. If a student had sensitive records (such as medical, counseling, or disciplinary files) while enrolled, those remain private under FERPA—even after graduation.

Rights of Students and Parents

When it comes to educational records, students and parents have important rights under FERPA. These rights ensure that personal academic information is accessible, accurate, and protected. Whether it’s checking grades, requesting transcripts, or fixing errors in records, understanding these rights is key to navigating the system.

Access to Educational Records

FERPA guarantees students and parents the right to access educational records, including:

1. Grades
2. Transcripts
3. Special education records

However, who has access depends on the student’s age and education level:

1. For students under 18: Parents have the right to access their child’s records.
2. For students 18 and older (or those in college): The rights transfer to the student, making them an “eligible student.” This means they alone can request access, unless they grant permission to their parents.

Schools are legally required to respond to access requests within 45 days. If needed, students and parents can ask for explanations to better understand the records. This process ensures transparency and accountability in education.

Amending Records

Mistakes happen. When a student or parent believes an educational record is incorrect, they have the right to request a correction. The process typically follows these steps:

1. Start with an informal request. The student or parent should first talk to the school official responsible for the record. If it’s a simple fix, this is the quickest way to resolve the issue.
2. Submit a formal written request. If the issue isn’t resolved informally, the next step is to submit a written request outlining the problem and what needs to be changed.
3. School decision. The school must review the request and decide whether to make the change.
4. Right to a hearing. If the school denies the amendment, they must inform the student or parent of their right to a formal hearing. During the hearing, the student or parent can present evidence to support their case.

This process ensures that students’ academic records are fair, accurate, and reflect the truth. No one should have to deal with errors that could impact their future opportunities.

Institutional Responsibilities

Educational institutions play a key role in protecting and managing sole possession records. These records—meant for an educator’s personal use—require careful handling to ensure privacy, maintain compliance with FERPA, and prevent accidental disclosure.

Schools must establish clear policies for keeping these records secure and follow strict guidelines when it comes to sharing information.

Maintenance of Records

Sole possession records should be stored securely and kept separate from official student records. Since these notes are for personal reference, they are not meant to be accessed by others.

Here are some best practices institutions should follow:

1. Keep records in a locked or secure digital format: Whether it’s a notebook in a locked drawer or password-protected digital notes, access should be limited.
2. Ensure that only the creator has access: No one else—including school administrators—should handle these records unless legally required.
3. Review policies regularly: Staying updated with FERPA guidelines helps institutions avoid unintentional violations and ensure compliance with federal privacy laws.

Following these steps helps protect both the educator’s privacy and the student’s rights, ensuring that personal notes don’t mistakenly become part of official student records.

Disclosure Protocols

When it comes to sharing sole possession records, institutions must be extremely cautious. These notes are meant for private use, not for distribution. However, in some cases—such as legal investigations or required compliance—disclosure may be necessary.

Here are some key protocols to follow:

1. Get written consent before sharing personal records. If disclosure is required, schools should always obtain the student’s or educator’s consent first.
2. Limit the amount of information disclosed. If sharing becomes necessary, only provide the absolute minimum required.
3. Train staff on FERPA regulations. Everyone involved in record-keeping should understand what qualifies as a sole possession record and when it can or cannot be shared.

By respecting privacy rules and ensuring proper training, institutions maintain student trust and protect the integrity of educational practices.

Exceptions and Exemptions

Not all records fall under FERPA’s strict privacy protections. Some exceptions allow certain records to be treated differently, meaning they can be shared without violating student privacy rights. Understanding these exemptions helps clarify what schools can and cannot keep private.

Law Enforcement Unit Records

Law enforcement unit records are a major exception under FERPA. These are records maintained by a school’s campus police or security office, not by the school’s administration. Since they are related to law enforcement activities, they aren’t considered education records and can be disclosed when necessary.

These records may include:

1. Incident reports (e.g., vandalism, theft, or disturbances on campus).
2. Investigation files related to student misconduct or criminal activity.
3. Security footage if handled by law enforcement rather than school officials.

For example, imagine there’s a fight outside a dorm. If campus police write a report, that document isn’t protected under FERPA—it can be shared with law enforcement agencies, school administrators, or even the media in some cases. However, if the school’s disciplinary office creates a report about the same incident, that version would be protected under FERPA.

Health and Safety Emergencies

FERPA prioritizes safety over privacy when there’s an immediate threat. If a student is in danger—whether due to a mental health crisis, medical emergency, or potential harm to others—schools can share information without violating FERPA.

Examples of when this applies:

1. A student is experiencing a medical emergency—the school can share health records with paramedics.
2. A student makes a violent threat—officials can notify law enforcement, parents, or mental health professionals.
3. A school believes a student is at risk of self-harm—they can reach out to family members or counselors to intervene.

Think of it this way: FERPA protects student privacy, but not at the expense of student safety. If withholding information could put someone at risk, schools are allowed—even required—to step in.

Resources and Assistance

Understanding FERPA can feel overwhelming, especially when dealing with specific exceptions like sole possession records. The good news? There are plenty of resources available to help schools and staff stay compliant while ensuring student privacy. From training programs to legal guidance, institutions can access support tailored to their needs.

FERPA Training Programs

Many universities and educational organizations provide FERPA training programs designed to help staff, faculty, and administrators understand their responsibilities. These sessions break down the essentials—like what counts as an educational record, when records can be shared, and how to handle sole possession records properly.

Training options include:

1. Interactive workshops that allow staff to discuss real-world scenarios.
2. Online courses for flexible, self-paced learning.
3. Live Q&A sessions with legal and compliance experts.

2 of the most reputed FERPA training programs used by universities across North America are the FERPA Training Modules provided by the US Department Of Education and the AACRAO Ferpa Training Program for University Registrars.

By participating in these programs, staff members get practical, hands-on knowledge that makes FERPA compliance easier to manage. After all, a small mistake—like misclassifying a record—can lead to serious privacy violations. The more prepared staff are, the less likely they are to make errors.

Legal Advisory Services

Even with training, some FERPA questions require expert advice—especially when it comes to complicated cases involving sole possession records or disclosure policies. That’s where legal advisory services come in.

Legal professionals can assist institutions by providing:

1. One-on-one consultations for tricky situations.
2. Policy reviews to ensure compliance.
3. Compliance audits to identify any potential risks.

Think of it like this: FERPA laws can change, and interpretations aren’t always straightforward. Having a legal expert on call can help schools avoid missteps and stay updated on new regulations. If an institution ever faces a FERPA-related complaint or investigation, legal advisors can provide crucial support in navigating the process.

By using both training programs and legal resources, schools can confidently manage student records—balancing privacy, compliance, and transparency.

Conclusion

Navigating FERPA and sole possession records may seem complicated, but at its core, it’s about protecting student privacy while ensuring proper record-keeping. Schools must be mindful of which records fall under FERPA protections and which do not, especially when handling personal notes or law enforcement records. Clear policies, staff training, and careful record management are the key to avoiding missteps. A little diligence now can prevent major privacy concerns later.

For university administrators, understanding disclosure rules and implementing best practices can make all the difference in compliance. Training programs, legal consultations, and regular policy updates help institutions stay on track. Students should also know their rights—who can access their records, how to request changes, and when privacy protections apply. When both schools and students are informed, everyone benefits from a more transparent and secure system.

If you’re looking for a simpler way to manage student records without the hassle of constantly checking on their compliance status and disclosure restrictions, EduTranscript offers a seamless, secure digital solution. With automated processes and enhanced credential security, it helps universities streamline record-keeping while keeping compliance in check. Why struggle with outdated systems when you can simplify everything in one place?

Book a demo call today and see how EduTranscript can make your job easier.