1. Introduction.
The university administers student educational records in accordance with the provisions of the Family Educational Rights and Privacy Act, also known as the Buckley Amendment or FERPA. This regulation provides that the student has a right of access to student educational records maintained by the university or any department or unit within the university, subject to certain exceptions which are outlined in this regulation. This regulation also protects the confidentiality of personally identifiable information in student records. Except to the extent allowed by applicable law, personally identifiable information contained in a student educational record will not be disclosed. A copy of this regulation is maintained by the University Registrar. All members of the campus community should be thoroughly familiar with this regulation and comply with its provisions.

1.1. In compliance with the Family Educational Rights and Privacy Act of 1974, it is the policy of the university that students have the following rights in regard to official educational records maintained by the university or any department or unit within the university. Subject to certain exceptions, the main rights of students are:

1.1.1. The right to inspect and review education records.

1.1.2. The right to request to amend their education records if they believe it contains .information that is inaccurate, misleading, or in violation of the student's rights of privacy,

1.1.3. The right to limit the disclosure of their education records

1.2. School officials are required by university policy to complete annual FERPA training, and to complete an acknowledgement that they treat all information to which they have access, other than directory information, as protected and confidential.

2. Definition of Terms

2.1. Student is any person who is or has been in attendance at the University (as an undergraduate, graduate or professional student) and regarding whom the University maintains education records.

2.1.1. ()

2.2. Education records is any record (in handwriting, print, tapes, film, computer, or other medium) provided by a student to the university for use in the educational process and/or any record from which a student can be personally identified except: sole possession notes, law enforcement or campus security records solely used for law enforcement purposes, records relating to employees of the institution (unless employment is contingent upon school attendance), records made by a physician, psychiatrist, psychologist, or other recognized professional in his or her professional capacity, in connection with treatment that are disclosed in connection with that treatment, and records obtained after a person is no longer a student (e.g. alumni records).

2.3. Directory information at East Carolina University consists of a student's name, address (including e-mail address), telephone listing, date and place of birth, major field of study, participation in officially recognized activities and sports, dates of attendance, weight and height of athletic team members, degrees and awards received and most recent previous educational agency or institution attended by the student.

2.4. School official is a person employed by the University in an administrative, supervisory, academic or research, or support staff position, including student workers, and volunteers as determined by the Office of the University Registrar.

2.5. Legitimate educational interest is a demonstrated "need to know" by those officials of an institution who act in the student's educational interest. They include: faculty, administration, clerical and professional employees, student workers, and other persons who need student record information for the effective functioning of their office or position. The following criteria shall be taken into account in determining the legitimacy of a University official's access to student's records:

2.5.1. The official must seek the information within the context of the responsibilities that he or she has been assigned; and

2.5.2. The information sought must be used within the context of official University business and not for purposes extraneous to the official's area of responsibility to the University.

3. Annual Notification

3.1. East Carolina University shall send a written notice of FERPA rights to every enrolled student at the beginning of each fall semester. The Office of the University Registrar is responsible for preparing and delivering the Annual Notification.

3.1.1. This Annual Notification includes: the student's rights mentioned above in Section 1.1, the right and steps for a hearing if request to amend record is denied, as enumerated in Section 6, below, and the right to file a complaint with the Family Policy Compliance Office. It will also include the definition of a "school official" and an "educational interest" and conditions under which a record will be released.

3.1.2. The Annual Notification is sent to students via ECU e-mail (the official means of communication) after census day for any given fall semester.

4. Student Right to Inspect and Review Their Records

4.1. Rights to inspect. Students have the right to inspect and review their official educational records, files, and data, maintained by the university and directly related to the student and not related to other students.

4.1.1. Documents that are not considered education records, and therefore are not subject to inspection include: sole possession notes, law enforcement or campus security records, employment records (unless employment is contingent upon student status), certain records relating to treatment by physician, psychiatrist, psychologist, etc.

4.2. Requesting inspection. Students should direct their request to inspect the records to the Office of the University Registrar. The custodian shall provide access to the records during regular business hours.

4.2.1. The university will comply with the request from a student to review his or her records within a reasonable time, but in any event not more than forty-five days after the request is made

4.2.2. Accommodations may be made for students to review their education records if circumstances make on-site inspection impractical due to geographic distance. In these instances, records may be sent to an institution near the student for an opportunity for the student to review the record.

5. .Disclosure of Records

5.1. Directory Information

5.1.1. ECU may disclose directory information without student consent.

5.1.2. Students may block disclosure of their directory information. To block disclosure of directory information, a student must file a Non-Disclosure Form with the Office of the University Registrar within seven days after registration day of the current term of enrollment. These blocks must be renewed each term.

5.2. Written consent required. ECU may not disclose the education records of a student to other persons unless that student has given consent in writing, unless otherwise permitted by the federal regulations.

5.2.1. The consent must specify the records or information to be released, the reasons for the release, and the identity of the recipient of the records.

5.3. Written consent not required. ECU may disclose information from the student's record without the written consent of the student in the following situations:

5.3.1. In compliance with a court order or subpoena;

5.3.2. Requests from school officials who have a legitimate educational interest in the information;

5.3.3. Requests from other departments or educational agencies who have legitimate educational interest in the information, including persons or companies with whom the University has contracted (such as an attorney, auditor, collection agent, The National Student Clearinghouse and Higher One);

5.3.4. Requests from officials of other colleges or universities at which the student intends to enroll or has enrolled provided the student is furnished a copy, if he or she so requests, so that he or she may have an opportunity to challenge the contents of the record;

5.3.5. Requests in connection with a student's financial aid;

5.3.7. Requests from parents of a dependent student as defined in Section 152 of the Internal Revenue Code of 1986;

5.3.8. Requests from appropriate persons in connection with an emergency, if the knowledge of such information is necessary to protect the health or safety of the student or other persons; or

5.3.9. When additional circumstances exist that permit the release without student consent, consistent with applicable regulations.

5.4. Procedures for Protecting the Privacy of Student Information in Electronic and Social Media Enrolled in Distance or Correspondence

Courses or Programs

5.4.1. East Carolina University recognizes the importance maintaining the privacy and security of student identity and student records in an environment of computer networked, digital records storage. ECU is diligent in protecting the security, confidentiality, integrity and availability of all student records including student identity. The University employs strict, standard security measures, policies, standards and guidelines in our ongoing effort to protect information resources, including student records. Student personal information is protected through a variety of measures, including the administration of policy and security practices that govern the PirateID and passphrase associated with accessing ECU's OneStop Portal, the online system that houses student grades, Blackboard, Centra, and other services that support the educational process at ECU. Students are required to have a strong passphrase that is resistant to "hacking." Students must reset their passphrase every 90 days and not reuse the account's previous six passphrases. When students use their PirateID and passphrase to access information through OneStop and the university's learning management systems, including Blackboard and Centra, their login credentials are encrypted for additional security. All mission-critical University systems, including student records, are maintained on network servers in the University's enterprise data center. The enterprise data center employs state of the art layered security controls and physical access controls. Users of information systems are prohibited from accessing data or programs for which they are not authorized.

5.4.2. In addition, it is the policy of the University that faculty, staff and instructors only use electronic products that are compliant with privacy safeguards, and approved in accordance with the University's social media policy, Reg 08.10.02. section 3

6. Procedure to Correct Records

6.1 Informal Resolution. If a student believes his/her education record is inaccurate or misleading, the first step is to discuss the concern with the University Registrar or designee. Contact that office at 252-328-6747. If the Registrar or designee does not agree with the student, the Registrar or designee will inform the student of the right to a formal hearing

6.1.1 Note: This does not apply to grade disputes (although it may be used to correct a clerical error in grades).

6.2. Formal Hearing Request. Students may request a hearing to challenge the content of his or her education record on the grounds that the information contained in the education records is inaccurate, misleading or in violation of the privacy rights of the student.

6.2.1 Students must request a formal hearing within 30 University business days from the date the student is informed by the Registrar or designee of the decision not to revise the education records. The request must be in writing, and must be delivered to the Associate Provost for Enrollment Services, to whom the Registrar ultimately reports.

6.3. Hearing Procedures. The Associate Provost for Enrollment Services, upon receipt of the written request, shall either hear the case personally or designate a hearing committee.

6.3.1 Committee Composition. The committee will include one representative from the University Registrar's Office or designee other than the one who has denied the request, two faculty members and two students.

6.3.2 Scheduling of Hearing. Within a reasonable period of time after the request for hearing, the student shall be informed of the date, place and time of the hearing.

6.3.3 Conduct of Hearing. The student may present evidence relevant to the issues raised and may be assisted or represented at the hearing by one or more persons of his/her choice.

6.3.4 Decision. The person or committee hearing the case shall decide it solely on the basis of the evidence presented at the hearing. The decision shall be in writing, delivered to all parties, and will summarize the evidence and state the reason(s) for the decision. If the decision is in favor of the student, the education records will be amended accordingly. If the decision is unsatisfactory to the student, he or she may place with the education record a statement commenting on the information in the records or setting forth any reasons for disagreement with the decision. Such statements will be maintained as part of the student's education record and released with the record anytime it is disclosed to third parties. The challenge to be considered in such a hearing may extend only to the material in the respective university file; it may extend to the correct recording of a grade but not to the appropriateness of the grade.

7. Procedure for Filing an Official Complaint with the Family Policy Compliance Office

7.1. A student has the right to file a complaint at any time with the U.S. Department of Education. However, it is expected that the student normally would exhaust the available administrative remedies for relief according to the University grievance policy procedures before filing such a complaint.

7.2. Official complaints may be directed to the Family Policy Compliance Office, U.S. Department of Education, 400 Maryland Avenue SW, Washington, DC 20202-5920.