Student
Privacy & FERPA
MUST University keeps student education records confidential and secure in accordance with the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, and 34 CFR Part 99. The University does not disclose education records or personally identifiable information from those records unless permitted by law and MUST’s Student Privacy Policy. This page explains your FERPA rights, what MUST considers directory information, and how to restrict directory information or authorize release of your records to another person.
What is FERPA?
The Family Educational Rights and Privacy Act (FERPA) of 1974, also known as the Buckley Amendment, is a U.S. federal law that protects the privacy of a student’s education records. FERPA applies to all educational institutions that receive funding from the U.S. Department of Education, including MUST. At the postsecondary level, FERPA rights belong to the student, not a parent or guardian, once the student enrolls regardless of the student’s age.
In general, FERPA gives you the right to: inspect and review your own education records; request correction of records you believe are inaccurate or misleading; consent to disclosures of personally identifiable information from your records, with certain exceptions; and file a complaint with the U.S. Department of Education if you believe MUST has not complied with the law. MUST provides a full annual notice of these rights to all enrolled students each Fall term; that notice appears on the Consumer Disclosures page.
What is protected?
FERPA protects the privacy of a student’s education records. Education records are records maintained by the University, or by a party acting on the University’s behalf, that contain information directly related to a student.
A “record” is any information recorded in any medium including handwriting, print, electronic files, or cloud storage.
Examples of education records include, but are not limited to:
- Biographical details, including date and place of birth, gender, nationality, race, and ethnicity.
- Grades, test scores, evaluations, courses completed, and official communications about academic status.
- Coursework, including assignments, exams, class schedules, and academic-related email or recorded communications.
- Student conduct or disciplinary records.
- Financial and financial aid records, including student-status employment records such as assistantships or internships.
- Student support, counseling, or health records maintained by the University, when applicable and subject to FERPA and other relevant privacy laws.
Education records do not include:
- Sole-possession records used only as a personal memory aid and not shared with anyone else.
- Employment records, unless the employment depends on the person's status as a student.
- Records containing information about an individual solely generated after their time as a MUST student has ended.
Directory information
What can be disclosed?
Directory information is information about a student that is generally not considered harmful or an invasion of privacy if disclosed. While FERPA protects the privacy of education records, directory information is not treated as confidential, and MUST may disclose it without a student’s consent unless the student has placed a directory-information restriction on their record.
Education Records may also be disclosed without consent in compliance with Accrediting Organizations, Federal, State and local educational authorities, conducting an audit, evaluation or enforcement of education programs or to comply with a judicial order or subpoena. MUST may also disclose information under the health and safety emergency exception if they identify a clear and articulable threat to the health or safety of a student or others.
MUST designates the following as directory information:
Authorized release
of records to a third party.
If you want MUST to share FERPA-protected information from your record with another person, such as a parent, sponsor, or other third party, you may authorize the release in writing. This may include information related to your account, billing, finances, or academic record.
- Complete the FERPA Authorization to Release Education Records, available through the student portal › Forms.
- Indicate which records may be released, to whom, and for what purpose, and set an expiration date for the authorization.
- Submit the signed form. You may revoke the authorization in writing at any time.
Placing or removing a
directory-information restriction.
At MUST, you place or remove a restriction on your directory information through the Registrar’s Office, rather than through a self-service toggle:
- Complete the Directory Information Non-Disclosure (Opt-Out) Request; available through the student portal › Forms.
- Submit the completed form to the Registrar’s Office through the student portal › Forms.
- The Registrar’s Office sets or clears the restriction on your record within 5 business days and confirms the change to you in writing.
- A restriction remains in effect until you rescind it in writing, using the same form.
Note: If you place a restriction, MUST will not confirm your directory information, including your enrollment, attendance, or degree status to third parties, including employers or degree/enrollment verification services, without your written consent.
Forms
Both forms below are completed and submitted electronically through the student portal.
They are not accepted by email or in paper form.
FERPA Authorization to Release Education Records
Use this form to allow MUST to share specific education records with a person or organization you name — for example, a parent, sponsor, or employer.
Who should use this form:
Any currently enrolled or former student who wants MUST to discuss or release protected education records (academic, enrollment/attendance, and/or financial/billing records) with someone other than themself.
What you'll need to provide:
- The name and relationship/organization of the person or organization receiving the records
- Which categories of records may be released (academic/transcript, enrollment & attendance, financial/billing, or other)
- The purpose of the release and an expiration date for the authorization
- Your signature and the date
This authorization is voluntary and may be revoked in writing at any time.
Directory Information Non-Disclosure (Opt-Out) Request
Use this form to withhold your directory information from disclosure, or to rescind a restriction you previously placed.
Who should use this form:
Any currently enrolled or former student who wants to prevent MUST from disclosing directory information (name, email, program, enrollment status, dates of attendance, degrees/honors, or most recent institution attended) without written consent — or who wants to resume normal disclosure after a previous opt-out.
What you'll need to provide:
- Your name, student ID, and program
- Whether you are requesting to withhold all directory information or to rescind a previous opt-out
- Your signature and the date
The Registrar's Office confirms the change in writing within 5 business days; the restriction remains in effect until rescinded using the same form.
Questions
For questions about this page, your FERPA rights, or either form, contact the Office of the Registrar via our Ticket Support Platform, or see the Student Handbook (Student Privacy / FERPA section)
