<%@ page import="org.jasig.portal.security.provider.*" %> <%@ page import="org.jasig.portal.security.*" %> <%@ page import="java.util.*" %> <%@ page import="com.pipeline.bom.Person_3" %> <%@ page import="com.pipeline.bom.PersonManager_3" %> <%@ page import="com.pipeline.bom.BomManagerFactory" %> <%@ page import="com.pipeline.web.WebUtil" %> <%@ page import="java.net.*" %> <% //Check to see if this is the Google search appliance String googleApplianceAgent="gsa-crawler"; String userAgent = request.getHeader("User-Agent"); //index will be greater than 0 if the GSA is detected int index=userAgent.indexOf(googleApplianceAgent); //pass-through authentication ------------------------------------------------------ if (index < 0){ //if this is not the Google search appliance String username = ""; try{ SimplePersonManager doriPerson = new SimplePersonManager(); IPerson i = doriPerson.getPerson(request); String uid = (String)i.getAttribute("urn:sungardhe:dir:loginId"); //out.println(uid); username = uid; }catch (java.lang.NullPointerException e){ //user not logged in - redirect to login String theRedirectURL = "/cp/home/displaylogin?goto=" + URLEncoder.encode(request.getRequestURL().toString().replace("http://", "https://")); %> <% }catch (Exception e){ out.println("Error: " + e); } } //END pass-through authentication ------------------------------------------------------ %>
<% //put content in school frame if this is not the Google search appliance if (index < 0){ %> <% } %>

Policies & Procedures

Questions about FERPA

Q.  How long does a student’s waiver or response remain in effect?

A.  Information provided by the student will remain in effect until it is changed by the student.  Once a student separates from the University, only requests for nondisclosure of Directory Information remain in effect.

Q.  Can a student give permission for some information to be shared (such as grades) but not other information (such as financial data)?

A. No.

Q.  I don’t deal with student educational records, but I occasionally submit a student’s status, like enrollment dates, in grant applications.  Do I need to check the student’s privacy status each time?

A. Yes. Dates of attendance are directory information. If a student has not specifically requested nondisclosure of directory information, it can be released, but you must always check.

Q. Can student workers check other students' waiver and nondisclosure requests?

A.  Student workers should not be given the responsibility for releasing any student information to anyone.  Only University employees should be disclosing student information in a manner consistent with the law.

Q. Do I need to take this training? 

A. Yes, if you manage, share, or have access to student information, you should complete the training.

Q. What types of information require student consent before release?

A. By default, directory information can be released without a student’s consent, but no other information can be released without a student’s consent.  See the FERPA web page for a list of directory information.

Keep in mind that students may request nondisclosure of directory information in which case no information can be released without the student’s consent.

 Q. Do I have to get students' consent to post their photos, names, majors, etc on my website, brochure, etc.

A. Directory information can be released without the student’s consent unless the student has requested that it not be.  The release of all other information about the student (including photos) requires the student’s written consent.

Q.  Who maintains these educational records?

A. See Tap 28 section G.

Q. Are there exceptions to securing consent?

A. See Tap 28, section H for a list of the legitimate interests that allow for disclosure.

Q. What should I do if I get a request for information about a student?

A. When releasing information, always check to see what, if anything can be released.

Remember, directory information can be released without the student’s consent unless the student has requested that it not be.  The release of all other information about the student requires the student’s written consent.

You will need to track such requests. The University will maintain a record of all requests for and/or disclosures of information from a student’s education records. The record will indicate the name of the party making the request, any additional party to whom it may be redisclosed, and the legitimate interest the party had in requesting or obtaining the information. The record may be reviewed by the eligible student.