Your student just texted that they failed a midterm. Or maybe they haven't texted at all in two weeks. You pick up the phone, call the registrar's office, and ask what feels like a reasonable question: "How is my child doing in their classes?"
The response feels like a door closing: "I'm sorry, but we can't share that information with you."
This is FERPA in action—and for most parents, it's the first time they realize the rules have fundamentally changed. The law isn't designed to shut you out of your student's life. It's designed to recognize that your 18-year-old is now a legal adult with privacy rights over their own educational records. Once you understand what FERPA actually allows—and how colleges implement it—you can work within the system rather than against it.
Key Takeaways:
FERPA transfers educational privacy rights from parents to students once they turn 18 or enroll in postsecondary education
The "tax-dependent exception" gives parents some access rights, but colleges aren't required to use it
Health and safety emergencies allow disclosure without consent
Directory information may be shared unless your student opts out
Student consent—often through Proxy Access or Parent Portal systems—remains the most reliable path to staying informed
What Is FERPA and Why Does It Exist?
The Family Educational Rights and Privacy Act, codified at 20 U.S.C. § 1232g, was enacted in 1974 to protect the privacy of student education records [1]. For K-12 students, parents hold these rights. But here's the shift most families don't anticipate: once a student turns 18 or enrolls in any postsecondary institution—whichever comes first—those rights transfer entirely to the student [2].
This reflects a straightforward legal principle: college students are adults making independent decisions about their education, health, and future. The law applies to any educational institution that receives federal funding, which includes virtually every college and university in the country.
What counts as an "education record" under FERPA? Essentially, any record directly related to a student that the institution maintains:
Grades and transcripts
Class schedules
Financial aid information
Disciplinary records
Billing statements
Advising notes
What doesn't count? Personal observations that aren't recorded, campus police records created for law enforcement purposes, and records held by campus health centers operating under HIPAA rather than FERPA.
The Tax-Dependent Exception: What It Actually Means
You've probably heard that if you claim your student as a dependent on your taxes, you can access their records. This is partially true—and widely misunderstood.
FERPA does include a provision allowing institutions to disclose education records to parents of dependent students without the student's consent. However, colleges are permitted to do this, not required to. Many institutions choose not to use this exception, preferring to route all communication through the student.
Even at schools that do honor the tax-dependent exception, the process typically requires:
Proof of dependency (usually a copy of your most recent tax return showing the student as a dependent)
A formal request through the registrar's office
Processing time that can take days or weeks
If you're hoping to call up and get an instant answer about your student's grades, the tax-dependent exception won't help you. It's a formal process, not a phone shortcut.
Proxy Access and Parent Portals: The Practical Path
The more reliable approach is student consent, and most colleges have built specific systems to make this work. Look for terms like "Proxy Access," "Delegated Access," or "Parent Portal" on your student's college website—these are the mechanisms institutions use to implement FERPA-compliant information sharing.
Here's how it typically works: Your student logs into their student portal and designates you as an authorized viewer for specific types of information. They might grant you access to billing and financial aid while keeping grades private, or they might open everything. The student controls the scope.
This approach is faster, clearer, and puts your student in control—which tends to result in better family communication overall. Rather than navigating bureaucratic processes, you receive direct access to the information your student has chosen to share.
If your student's college uses a third-party billing portal (many do), this same principle applies. You may be paying the bill, but FERPA treats billing records like any other education record. Your student typically needs to grant you delegate access within that system for you to view statements directly.
Before your student leaves for college:
Discuss what information you'd like to stay informed about
Ask them to set up Proxy Access or sign FERPA release forms for specific purposes (grades, billing, housing)
Establish regular check-in expectations that don't rely solely on institutional disclosure
Health and Safety Emergencies: When Colleges Can Act
FERPA includes an emergency exception that allows institutions to disclose information without consent when knowledge of that information is necessary to protect the health or safety of the student or others.
This exception exists for genuine emergencies—a student in medical crisis, a credible threat to campus safety, or a situation requiring immediate action. It doesn't cover:
General concerns about your student's wellbeing
Wanting to know if they've been attending class
Worry because they haven't returned your calls
Colleges interpret this exception narrowly, and for good reason. If every concerned parent call triggered an emergency disclosure, the exception would lose its meaning. That said, if you have genuine, specific reasons to believe your student is in danger, communicate that clearly to campus officials. Most institutions have protocols for conducting wellness checks and can at least confirm that your student is physically safe.
Directory Information: The Public Exception
Not all student information receives equal protection under FERPA. "Directory information" is a category of generally non-sensitive data that institutions may disclose without consent unless the student specifically opts out [3].
Typical directory information includes:
Name
Campus address and email
Major and enrollment status
Dates of attendance
Degrees and honors received
Participation in officially recognized activities and sports
This is why you might receive alumni association mailings addressed to your student, or why their name appears on the Dean's List announcement. The institution has determined this information poses minimal privacy risk.
Students can request that their directory information be suppressed. If your student has done this, even confirming that they attend the institution may require their consent.
Where FERPA Meets HIPAA: Student Health Records
Here's where things get more complicated. HIPAA—the Health Insurance Portability and Accountability Act—governs medical records. FERPA governs education records. When a student visits the campus health center, which law applies?
The answer depends on institutional structure. Health records created by a health professional acting in that capacity may be protected under FERPA as part of education records, or they may be protected under HIPAA if the health center operates as a covered healthcare provider [4].
In practice, this means:
The campus counseling center likely won't share therapy notes with you regardless of your tax-dependent status
Treatment records are almost always more protected than academic records
Being the health insurance policyholder doesn't automatically grant you access to your adult student's medical information
If your student is receiving mental health support, the most reliable way to stay informed is through direct conversation with your student—not through institutional channels.
This isn't a flaw in the system. Research consistently shows that students are more likely to seek help for mental health concerns when they trust that information will remain confidential [5]. The privacy protections encourage treatment.
Understanding Current FERPA Implementation
The Department of Education's Student Privacy Policy Office (PTAC) periodically issues guidance clarifying how FERPA should be applied. Several principles are worth understanding:
Consent must be informed and specific. When your student signs a FERPA release, they should understand exactly what information will be shared and with whom. Blanket releases covering "everything" are discouraged in favor of specific, informed authorization.
Technology creates new considerations. As colleges adopt student success platforms, early alert systems, and integrated portals, questions arise about what data these systems collect and how it's protected. These tools are designed to support students—not to create surveillance mechanisms—but the data flows can be complex.
The emergency exception requires articulable threat. Institutions can't use "emergency" as a catch-all justification. There must be a genuine, identifiable threat that makes disclosure necessary.
For parents, the practical takeaway is this: institutional policies vary more than the law requires. Some colleges are quite open to parent communication within FERPA boundaries. Others maintain strict student-only policies. Knowing your student's specific institution's approach matters as much as knowing the federal baseline.
Financial Records: The "I Pay the Bill" Question
One of the most common friction points for parents involves financial information. You're writing the tuition checks, but you can't access the bursar account. Under FERPA, this is by design.
Financial aid records, billing statements, and account information are all considered part of the student's education record. Paying the bill—whether directly or through loans in your name—doesn't automatically grant you access to view those records.
Most colleges address this through the same Proxy Access or delegated access systems described earlier. Your student designates you as an authorized user on their billing portal, and you can then view statements, make payments, and receive notifications.
If your student hasn't set this up and you need to make a payment, many institutions allow payments from third parties without requiring account access. You can often pay by check or through guest payment portals without seeing the full account details. This isn't ideal, but it's a workaround if your student hasn't completed the authorization process.
Building a Communication Bridge That Works
FERPA doesn't have to mean silence. The most effective approach combines understanding the legal landscape with proactive family communication.
During the academic year:
Ask your student directly rather than calling the college first
If using the tax-dependent exception, submit documentation early in the semester
Understand that "no news" from the institution isn't the same as "everything is fine"
Set up regular check-in calls or texts that become routine rather than reactive
If concerns arise:
Request a wellness check if you have genuine safety concerns—be specific about what behaviors concern you
Contact the Dean of Students office, which often serves as a liaison for family concerns
Remember that your student can always give verbal consent during a phone call for specific disclosures
The goal isn't to monitor your student's every move. It's to maintain a relationship where they feel comfortable sharing important information with you directly—because they trust you'll respond supportively rather than intrusively.
Ready to Stay Connected Without Overstepping?
FERPA creates boundaries, but it doesn't have to create distance. The law recognizes your student's adulthood while still allowing meaningful parent involvement—when your student chooses to include you.
Platforms designed for the modern college experience can help bridge this gap. CampusMind offers parents student-consented wellbeing insights, so you can stay connected to your student's college journey without navigating FERPA bureaucracy. When your student chooses to share, you receive meaningful updates about their engagement and wellbeing—not surveillance, but communication.
Join the CampusMind Parent Community to learn how families are staying connected while respecting student independence.
Frequently Asked Questions
Can I see my student's grades if I'm paying tuition?
Payment alone doesn't grant access to education records under FERPA. The tax-dependent exception requires proof of IRS dependency status, not just financial contribution, and even then colleges may choose not to use this exception. The most reliable path is having your student set up Proxy Access or sign a FERPA release form granting you access to grade information through their student portal.
What if my student is on my health insurance—does that give me medical record access?
Being the policyholder doesn't automatically grant access to your adult student's medical records. HIPAA protects patient privacy regardless of who pays for insurance. Campus health centers may operate under FERPA or HIPAA depending on their structure, but in either case, treatment records receive strong privacy protection. Your student can authorize you to receive information if they choose.
Can I find out if my student is attending classes?
Attendance records are typically protected under FERPA as part of education records. Unless your student has signed a release or the institution honors the tax-dependent exception for attendance information specifically, you won't receive this data directly from the college. Some professors maintain their own attendance policies, but they're also bound by FERPA regarding disclosure to parents.
What should I do if I think my student is in crisis but they won't talk to me?
Contact the Dean of Students office or campus counseling center and express your specific concerns. While they likely cannot share information about your student without consent, they can conduct outreach and wellness checks. Be as specific as possible about what behaviors concern you—vague worry is harder to act on than concrete observations like "hasn't responded to any contact in two weeks" or "sounded extremely distressed in our last conversation."
Does FERPA apply to students under 18 who are enrolled in college?
Yes. FERPA rights transfer based on enrollment in postsecondary education, not age. A 17-year-old enrolled in college has the same FERPA protections as a 22-year-old. This applies to dual-enrollment high school students taking college courses as well—for those specific college records, FERPA places control with the student, not the parent.
About This Guide
This article was developed by the CampusMind Insights team, which specializes in translating complex higher education policies into practical guidance for families navigating the college experience. Our content is informed by current federal regulations, Department of Education guidance, and the real questions parents ask when trying to support their students. CampusMind partners with institutions to create connected campus experiences that respect student privacy while keeping families appropriately informed.
Works Cited
[1] U.S. Department of Education — "Family Educational Rights and Privacy Act (FERPA)." https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html
[2] U.S. Department of Education — "FERPA General Guidance for Parents." https://studentprivacy.ed.gov/resources/ferpa-general-guidance-parents
[3] U.S. Department of Education — "Guidance on Reasonable Methods under FERPA." https://studentprivacy.ed.gov/resources/guidance-reasonable-methods-under-ferpa
[4] U.S. Department of Health and Human Services — "Joint Guidance on the Application of FERPA and HIPAA to Student Health Records." https://www.hhs.gov/hipaa/for-professionals/faq/ferpa-and-hipaa/index.html
[5] American College Health Association — "Standards of Practice for Health Promotion in Higher Education." https://www.acha.org/standards
