FERPA After Student Death — What Universities Can and Cannot Release

The Federal Rule Is Simpler Than Most Administrators Think

Under the Family Educational Rights and Privacy Act, a student's FERPA protections terminate at death. This is the part most residence life and student affairs professionals get right in concept but wrong in practice — because the federal rule is only the beginning of the analysis.

FERPA assigns privacy rights to students once they turn 18 or enroll in a postsecondary institution. Those rights belong to the student, not the parents. When the student dies, the federal protections expire. The U.S. Department of Education has confirmed this interpretation: FERPA does not prohibit the disclosure of a deceased student's education records.

This does not mean the records are automatically released to anyone who asks.

State Laws and Institutional Policies Still Apply

Even though federal FERPA protections lapse, many universities maintain their own post-mortem disclosure policies that impose additional restrictions. These policies exist for sound reasons — they prevent casual or exploitative access to a deceased student's academic, disciplinary, and counseling records — but they also create confusion for staff members who hear "FERPA doesn't apply" and assume everything is now public.

Common institutional practices include a courtesy hold period (often one year or longer) during which records are released only to the executor of the student's estate, a next of kin who can produce a certified death certificate, or a party compelled by court order. Many state-level open records statutes impose their own requirements, particularly at public institutions where student records may technically fall under sunshine laws.

The registrar's office should have a clear written procedure for handling these requests. When a family member calls asking for transcripts, grades, or disciplinary records, the response should follow the institution's policy — not an ad hoc judgment call by whoever answers the phone.

What Records Families Typically Request

In the weeks and months after a student's death, families commonly ask for:

• Academic transcripts — for posthumous degree consideration, for closure, or because they want to see what their child was studying
• Housing and dining records — to understand billing, unused balances, and refund eligibility
• Disciplinary records — particularly when the family suspects the university knew about risk factors (substance use, prior self-harm reports, hazing complaints) that weren't communicated
• Counseling records — the most sensitive category, often governed by separate state mental health confidentiality laws even beyond FERPA
• Card-swipe and access logs — families pursuing wrongful death claims may request these as part of discovery

Counseling records deserve special attention. Even when FERPA no longer applies, state mental health privacy laws typically do. A therapist's clinical notes from a campus counseling center may be protected under state medical confidentiality statutes that survive the patient's death. The general counsel's office should be involved before any counseling records are released.

The Practical Protocol for Registrars

When the Dean of Students notifies the registrar of a student death, the registrar should immediately:

1. Update the student information system to "Deceased" status, which stops automated communications
2. Place a hold on all record releases pending verification of the requestor's authority
3. Document the institution's post-mortem disclosure policy in the case file
4. When a records request arrives, verify the requestor's identity and legal standing (executor, next of kin, court order) before releasing anything
5. Route any request involving counseling, health, or disciplinary records through the general counsel's office

This sequence protects the institution and the family. It ensures records aren't released prematurely to journalists, estranged family members without legal standing, or litigation-fishing attorneys — while also ensuring the family gets what they're entitled to without unnecessary delay.

The Tension Between Compassion and Compliance

The hardest version of this scenario is a grieving parent who calls the registrar's office and says, "I just want to see my child's grades." The instinct is to help immediately. The correct response is to follow the procedure — verify identity, confirm legal standing, check the policy — even when it feels bureaucratic in the face of grief.

Skipping the procedure to be compassionate in the moment creates liability and can harm other parties. A student may have had an estranged parent, a protective order, or an estate with competing claims. The procedure exists to handle these complexities systematically.

The University Student Death Protocol includes FERPA compliance checklists, record-release verification workflows, and template language for responding to family records requests — built for the reality that compliance and compassion need to operate simultaneously, not in opposition.