Case name: Letter re: Marymount University, No. 11-23-2313 (OCR 01/16/25).
Case name: Letter re: Marymount University, No. 11-23-2313 (OCR 01/16/25).
The Family Educational Rights and Privacy Act doesn’t require schools to destroy student records. To reduce technology costs and limit potential data breaches, many schools and districts establish their own retention policies, including timeframes for the eventual destruction of unnecessary records. But how can institutions know if their data destruction practices comply with their FERPA duty to protect personally identifiable information (PII) in a student record?
This article will focus on some of the trends and policy changes that may be considered good news for higher education and other trends and policy decisions that may be considered bad news for higher education.
When U.S. Attorney General Pamela Bondi issued a sweeping memorandum on July 29, 2025 to all federal agencies, it became the latest in a forceful line of tactics designed to curtail race- and sex-based diversity, equity, and inclusion practices at educational institutions. The document, “Guidance for Recipients of Federal Funding Regarding Unlawful Discrimination,” reaffirms that no federal funds may be used to support discrimination, regardless of a program's label or intent, with explicit focus on DEI initiatives that may run counter to federal antidiscrimination laws.
Many of my FERPA Doc columns are borrowed by other Wiley editors for use in their newsletters. One such column appeared in the June 2015 issue of Disability Compliance for Higher Education. That column focused on what information could be disclosed about students under FERPA's health and safety emergency exception to written consent (34 CFR §99.31 (a) (10); 34 CFR §99.36). In that column, I reviewed the longstanding, illegal, non-directory information disclosures by University of Iowa personnel to the county sheriff's office whenever a U of I student applied for a gun permit. This practice had continued for 21 years. It had begun after there had been a shooting on the Iowa City campus in 1992. I also reviewed the Virginia Tech shootings in 2007 to determine whether Tech had properly used FERPA prior to the 2007 killings on that campus. In both the Iowa and Tech cases, I found that both schools demonstrated a professional, and ongoing, ignorance of FERPA. Their punishment should have gone beyond a mild slap on the wrist. (If you wish to read my commentary, let me know and I will send you the columns.)
Case name: Letter re: Detroit Public Schools, No. 15-25-1172 (OCR 06/24/25).
Case name: Letter re: Atoka Public Schools, No. 07251417 (OCR 08/22/25).
Designing a college or university environment responsive to and reflective of the nation's needs isn’t a new challenge; even the fevered pitch of today's debate about the best approaches to that end isn’t new. The approach of the federal government's enforcement of civil rights laws, however, is, and administrators for institutions of higher education must carefully evaluate the landscape as they endeavor to undertake work to meet all students’ needs.
As two-time Olympic gold medalist Natasha Hastings (2008 and 2016 Olympics, 4 × 400 relay) saw her track career winding down, she contemplated what the next chapter of her life would be. While she had found psychotherapy of tremendous benefit both athletically and personally, she had often been frustrated by the dearth of Black female therapists.
CLEARWATER BEACH, Fla. — It's easy to get caught up in the excitement of giving students the opportunity to travel internationally for study abroad programs, athletic competitions, or band performances. However, traveling abroad presents liability and compliance challenges that require a risk management plan to protect your institution and students.

