Staff and faculty with access to student education records are legally responsible for protecting the privacy of the student by using information only for legitimate educational reasons to instruct, advise, or otherwise assist students.

FERPA also assures certain rights to students at the university regarding their education records. These rights do not transfer to parents, guardians, spouses, or other family members without the specific written permission of the student.

For additional information and guidance regarding working with students records, visit the privacy overview, training, and code of responsibility pages.

Classes

You are responsible for protecting the education records you store about students enrolled in your classes. The fact that the student is registered for your class is non-directory information; thus, you may not release a class list or even a single student's name to a third party.

Other non-directory information you might maintain about students in your class includes:

• class attendance records;  
• quizzes and exams grades;  
• homework, etc.

All these records are considered education records and must be protected. Appropriate avenues for storing education records about your class are Canvas or OneDrive.

Please note that education records should not be stored on personal accounts in the cloud, such as a personal Google Docs account or an Apple iCloud account. Personal accounts are not compliant with UO's Student Record Policy.

Computers and Passwords

You are responsible for maintaining the security of your workstation and computer monitor. This includes the responsibility for all transactions that occur under your username and password, and for all information that is released about university students.

Do not leave your workstation or computer unattended while logged in to Banner or Web for Faculty. Do not give your password or Personal Access Code (PAC) to another employee or student. Violation of this regulation may revoke your access privileges.

Directory Information

Only records defined as "directory information" may be released without the student's written permission. No other information contained in a student's educational records may be released to persons or organizations without the student's prior written approval.

Students with Restricted Directory Information

A student may restrict the release of all Directory Information.

Once the restriction form is processed, no information—including directory information—is to be released to anyone, including persons claiming to be the student, parents, relatives, friends, other students, or prospective employers who may wish to contact the student or verify their status at the University.

Students who have restricted the release of Directory Information are required to present photo identification when they wish to discuss or make inquiries about their education record.

Posting of Grades

Faculty and staff are responsible for protecting the identity of students and keeping student grades confidential. Grades or evaluations linked to personal identifiers (names, UO ID numbers, or social security numbers) may not be publicly disclosed without specific permission from the student. Graded papers, exams, quizzes and other assignments are considered part of the student's education record and must be returned to the student in a manner designed to maintain confidentiality.

If posting grades or evaluations without student permission (whether on office doors or on websites), do so only by using randomly generated codes and numbers.