What student records does FERPA require schools to keep, and which ones can be destroyed?

FERPA (the Family Educational Rights and Privacy Act) is often misunderstood as a records retention law. In fact, FERPA is primarily a privacy law. It governs who may access a student’s education records and how those records are protected — not how long a school must keep them. Understanding this distinction is the key to answering the question.

What FERPA Actually Requires

FERPA protects “education records”: records that are directly related to a student and maintained by an educational agency or institution (or a party acting for it). This broadly includes grades, transcripts, disciplinary records, special-education files, and similar documents.

FERPA’s core mandates are about handling, not hoarding:

• Give parents and eligible students the right to inspect and review education records.
• Provide a process to request correction of inaccurate records.
• Obtain consent before disclosing personally identifiable information, with limited exceptions.

Because these rights depend on the record still existing, FERPA does impose one important limit: a school may not destroy a record while there is an outstanding request to inspect or review it. Beyond that, FERPA itself sets very few mandatory retention periods.

Which Records Can Be Destroyed

FERPA generally permits schools to destroy education records once they are no longer needed — provided no access request is pending and no other law requires retention.

The catch is that “other law” does most of the work. Retention periods for student records usually come from:

• State education statutes and regulations, which set the minimum and permanent retention rules for transcripts and other records.
• Federal program requirements (for example, special-education or federal-aid rules) that mandate keeping certain files for set periods.
• The institution’s own approved records retention schedule.

In practice, transcripts are commonly retained permanently or for very long periods, while routine or transitory records may be destroyed much sooner once their administrative value ends.

The Takeaway

FERPA tells you how to protect and provide access to student records; your retention schedule — built from state law, federal program rules, and institutional policy — tells you what to keep and what to destroy. Always confirm there is no pending access request and no legal hold before disposing of any education record.

For more foundational concepts, see the fundamentals topic hub.