FERPA Deceased Student Records

FERPA Does Not Disappear When a Student Dies

Most principals assume that privacy obligations end with the student. They do not — at least not uniformly. The rules change depending on the student's age at death, whether the student had reached "eligible student" status, and which state you operate in.

For non-eligible students at the elementary/secondary level (generally students under 18 who have not enrolled in a postsecondary institution), FERPA rights do not lapse upon death. The student's parents continue to hold the rights FERPA gives them over education records while they are living. FERPA generally requires consent before disclosing personally identifiable information from those records, unless a FERPA exception applies.

For eligible students (18 and older, or enrolled in postsecondary education), FERPA rights lapse at death under federal law. The institution may disclose records at its discretion or consistent with state law. Separate state privacy laws may impose additional restrictions, so check your state's student privacy requirements before disclosing records about a deceased eligible student.

The Sole Possession Notes Exception

During a crisis response, teachers and counselors write observations constantly. A teacher notices a student crying at their desk. A counselor jots down notes from a check-in conversation. An administrator writes down which students visited the support room and what they said.

Under FERPA, handwritten or digital notes qualify as "sole possession" notes — and stay outside the definition of "education records" — only if two conditions are met:

1. The notes are used solely as a personal memory aid
2. The notes are never shared with or accessible to any other person

When a teacher shares an observation about a distressed student, the note no longer qualifies for the sole-possession exclusion. If the school maintains it and it directly relates to an identifiable student, it is generally an education record subject to applicable FERPA rights and potentially discoverable in litigation. The same applies when a counselor shares session notes with the principal.

This has direct implications for your crisis response documentation. Tracking logs the school maintains that directly relate to identifiable students are education records. Store them accordingly: under the same retention schedule as other education records, with access restricted to authorized personnel.

The Health and Safety Emergency Exception

FERPA includes an exception that permits disclosure of personally identifiable student information without parental consent during a health and safety emergency. The school must assess each situation based on its circumstances. If it determines there is an articulable and significant threat to a student's or another person's health or safety, it may disclose information to appropriate parties who need it to address that threat.

Three constraints govern this exception:

The threat must be articulable and significant. The school must make a case-by-case determination based on the totality of the circumstances. A general concern about a student's well-being, without a significant threat to health or safety, does not by itself establish the exception.

Disclose only to appropriate parties. Share information only with parties whose knowledge is necessary to protect health or safety, and only for the duration of the emergency. This does not permit a blanket release of the student's records.

Record the disclosure. FERPA requires the school to record in the student's education records the articulable and significant threat that formed the basis for the disclosure and the parties to whom information was disclosed. Keep that record with the student's education records for as long as those records are maintained.

What You Can and Cannot Share Publicly

After a student death, you will face pressure from media, parents, and community members to share information about the deceased. Here is where the lines are:

You can share: directory information (name, grade, enrollment status) for a deceased non-eligible student if your district's annual FERPA notification includes these as directory information categories and the parent did not opt out. You can also share factual information the family has authorized; if it comes from an education record, any consent must meet FERPA's written-consent requirements.

Do not disclose without consent or an applicable FERPA exception: personally identifiable information from education records, including academic records, disciplinary history, attendance records, health records, counseling notes, and IEP or 504 plan information. FERPA governs information from education records; it does not generally prohibit a school official from sharing information learned through personal knowledge or observation.

The gray area: a student's involvement in school activities (sports teams, clubs, academic honors) is typically classified as directory information, but check your district's specific directory information definition. If the deceased was on the honor roll and a reporter asks about their academic standing, the answer depends on whether "honors" falls within your district's directory information notice.

Litigation Holds

When litigation is reasonably anticipated, the district must preserve relevant records. For on-campus deaths, suicides, accidents during school-sponsored activities, or allegations of negligence, consult district counsel promptly about whether a litigation hold is required and what it should cover. If the school receives notice of pending litigation, issue the hold immediately.

A litigation hold suspends routine destruction of records relevant to the anticipated litigation. That means:

• Do not purge emails related to the student or the incident
• Do not shred documents on the normal retention schedule
• Do not delete digital files, even drafts
• Notify all staff who may possess relevant records — teachers, counselors, coaches, front office, IT department

Failing to preserve records after a reasonably foreseeable litigation event exposes the district to sanctions for spoliation of evidence. Courts do not look kindly on a school that shredded the counselor's notes six weeks after a student died on campus.

The hold stays in place until legal counsel confirms the litigation risk has passed. Do not lift it on your own authority.

Practical Steps for the Principal

Within the first 24 hours of a student death:

1. Confirm with your district's legal counsel whether a litigation hold is warranted
2. Notify your IT department to preserve all email and digital communications related to the student
3. Instruct crisis team members that any notes they create about student interactions during the response are education records if shared with anyone
4. If media or community members request student information, route all requests through your district's FERPA compliance officer
5. Brief the deceased student's teachers not to disclose personally identifiable information from the student's education records outside the school without parental consent or another applicable FERPA exception

The School Principal's Death Response Plan includes a FERPA emergency disclosure log, a litigation hold directive template, and a privacy decision tree that walks you through disclosure decisions scenario by scenario.