Parent Rights and Student Data Privacy: A Plain-English Guide

A mom in Ohio emailed us last spring. Her 9th grader had changed schools twice in two years, and somewhere along the way, a counselor's handwritten note about a tough week in 7th grade had followed him into a new building, into a new teacher's inbox, and into a conversation she was never part of. She wasn't angry at any one person. She was tired. She just wanted to know: what does the school actually have on my kid, who can see it, and what am I allowed to do about it?

If you've ever felt that quiet worry, you're in good company. Student data has grown fast, faster than most parents have had time to keep up with. The good news is that you have more rights than you probably realize. Let's walk through them calmly, the way we would on a phone call.

FERPA Is Your Starting Point (and It's Older Than You Think)

The Family Educational Rights and Privacy Act, passed in 1974, is the federal backbone of student records privacy. Under FERPA, you have the right to inspect and review your child's education records, and the school must respond within 45 days of your written request. Most parents have never heard that 45-day number. Schools rarely volunteer it.

A few things worth knowing up front:

• FERPA applies to schools that receive federal funding. Most public and many private schools do. Some private programs do not, which creates a real gray zone.
• When your child turns 18 or enrolls in college, FERPA rights transfer from you to them. This catches a lot of families by surprise during the senior year of high school.
• You have the right to request corrections to inaccurate records. If the school declines, you can file a formal statement of disagreement that becomes part of the record itself.

These are your baseline tools. Everything else builds from here.

The "Directory Information" Loophole Most Parents Miss

Here's one that trips up almost everyone. Under FERPA, schools can publicly release what's called directory information without your consent. That can include your child's name, address, phone number, email, photograph, dates of attendance, honors, and awards.

The only way to stop this is to formally opt out in writing, usually at the start of the school year. If you never opted out, the school is legally permitted to share that information with yearbook vendors, photographers, local newspapers, and, under separate federal law, military recruiters. The recruiter opt-out, tucked into federal education statutes, is rarely communicated clearly. Millions of students' contact details get shared every year by default.

If you don't remember signing an opt-out form, you probably didn't. Ask your school for it. It's a two-minute fix.

The Data You Don't See: Apps, Platforms, and Behavioral Tracking

This is where modern schooling gets complicated. A 2020 privacy audit found some classroom ed-tech apps collect 30 or more data points per student. Login times. Click patterns. Video watch duration. Typing speed. Error rates. Some AI tutoring tools now infer emotional state and cognitive load from how a student interacts with the keyboard.

A few realities worth sitting with:

• District approval doesn't always mean privacy vetting. Some districts have no formal review process for the apps teachers use. "The district approved it" can mean almost anything.
• COPPA only goes so far. The Children's Online Privacy Protection Act protects kids under 13, but schools are allowed to grant consent on behalf of parents for ed-tech tools. You may never see the consent form.
• Deleting an app does not delete the data. Most platforms keep data on their own retention schedule, not yours.
• Parent portal access is not the same as your full FERPA record. Portals show a curated view. The official record often contains more.

None of this means ed-tech is bad. It means the data picture is bigger than the dashboard your school shows you.

How Online Schools Handle This Differently

There's a common assumption that online schools are less private than traditional ones. In practice, the opposite is often true. Because instruction happens on a single, auditable platform, well-run online programs tend to have more formal, documented data policies than the patchwork of apps a brick-and-mortar school might use across 30 teachers.

In our accredited K-12 online home school, we talk with families directly about what's collected, why it's collected, and how long it's kept. Parents see the same learning environment their student sees. That transparency is one of the reasons our families leave 5.0 out of 5 verified parent and alumni reviews. When everything is digital, everything is visible, including to you.

That said, online learning does create data that traditional classrooms never generated. Behavioral and academic data are intertwined. A thoughtful program minimizes collection to what actually helps the student learn, and explains the rest.

Beyond FERPA: PPRA, IDEA, and State Laws That Give You More

FERPA is the floor, not the ceiling. A few other protections matter:

• PPRA (Protection of Pupil Rights Amendment) requires schools to notify parents before surveying students on sensitive topics: political beliefs, mental health, family income, religious practices, and more. You have the right to review the survey and opt your child out.
• IDEA gives parents of students with IEPs stronger access and consent rights for special education records, beyond what FERPA alone offers.
• State laws are increasingly going further than federal law. California, New York, Texas, Colorado, and others have passed student privacy statutes that add parental rights, require data minimization, and regulate ed-tech vendors more tightly.

If you live in one of these states, your rights on paper are stronger than the federal baseline. The hard part is knowing to ask.

A Practical Walk-Through: Requesting Your Child's Records

You don't need a lawyer to do this. Here's the simple version:

1. Write a short, dated letter (email is usually fine) to the principal or records office. State that you're requesting to inspect and review your child's education records under FERPA. Include your child's full name, date of birth, and grade.
2. Ask for everything, not just grades. That means disciplinary records, counselor notes that have been shared, attendance, assessment results, IEP or 504 documentation, and any third-party vendor records the school maintains.
3. Note the 45-day timeline. You're legally entitled to a response within that window.
4. If something is wrong, request an amendment in writing. If the school refuses, you have the right to a hearing and, if needed, to place a written statement of disagreement in the file.
5. If the school won't cooperate at all, you can file a complaint with the U.S. Department of Education's Student Privacy Policy Office.

Keep copies of everything. A polite paper trail protects you.

10 Questions to Ask Your Child's School This Year

Print this, email it, or just keep it on your phone:

1. What personal data do you collect on my child, and why?
2. Which third-party apps and platforms will my child use this year?
3. Have those vendors signed a written data privacy agreement with the school?
4. How long do you retain my child's records after graduation or transfer?
5. What is your process for notifying parents of a data breach?
6. Is directory information shared by default, and how do I opt out?
7. Is my child's contact info shared with military recruiters, and how do I opt out?
8. Who qualifies as a "school official with legitimate educational interest"?
9. What behavioral or engagement data does your learning platform collect?
10. How do I request the full education record, not just the parent portal view?

A school that answers these clearly is a school worth trusting. A school that stumbles or stalls is telling you something too.

What to Do If You Want a Program Built Around Transparency

Trust in your child's school isn't built in a policy document. It's built in how the school answers your questions when you ask them. If you've been feeling uneasy about what your current school collects, shares, or won't explain, it may be worth exploring what a more transparent program looks like.

We built our online K-12 program around the idea that parents should know what's happening with their student, academically and otherwise. You see the coursework. You see the progress. You're a partner, not an outsider peeking through a portal.

If you want to talk through your family's situation, including records transfers, privacy questions, or whether a self-paced online program might fit your child better, reach out to our team or call (888) 242-4262. Tuition is a counselor conversation, not a form. We'll listen first, and help you figure out the right next step for your family, whatever that ends up being.

Your child's data is part of their story. You should get to help tell it.