ferpa
Disclosing records no longer maintained, FERPA
<p>Are professors able to discuss a student’s academic misconduct with others after the disciplinary file is no longer maintained after a set amount of years after the student has graduated? Even if the original academic records (eg. plagiarized exams) are still ‘maintained’ by the professor?</p>

<p>I assume there was an official hearing on misconduct, but the record was deleted from the university's holdings (following deletion policy). The disciplinary board had copies of the exam, complaint, and minutes from the hearing – and these were later deleted by policy. The instructor might still have the exam, and perhaps his own notes from the hearing. By the federal definition of <a href="https://www.ecfr.gov/cgi-bin/text-idx?SID=2aa3d1b7c535f77761142e614296382f&amp;mc=true&amp;node=se34.1.99_13&amp;rgn=div8" rel="nofollow noreferrer">education record</a>,</p>

<blockquote>
  <p>(b) The term does not include:</p>
  
  <p>(1) Records that are kept in the sole possession of the maker, are
  used only as a personal memory aid, and are not accessible or revealed
  to any other person except a temporary substitute for the maker of the
  record.</p>
</blockquote>

<p>The exam itself is made by the student, and is not in the sole possession of the maker: the exam does not fall within the purview of this "not a record" exception. The faculty member's notes on the hearing were made by the faculty member, and they <em>are</em> covered by the "not a record" provision, <em>as long as they are are not accessible or revealed to any other person</em>. What this provision is about is that students have the right to access education records, but they do not have the right to access the faculty member's own personal notes about the hearing. Disclosing those personal notes makes them a record, meaning that consent is required.</p>

<p>The faculty member is probably in violation of university policy, for keeping a record past the destroy date. As an example, the final 3 pages of <a href="https://library.osu.edu/documents/records-management/general-schedule.pdf" rel="nofollow noreferrer">this records retention schedule</a> indicate that a record is to be destroyed within 3 years of the student no longer being enrolled, at the maximum. Coursework materials are to be destroyed 2 terms after the term of enrollment. In reading this document, the wording is a bit vague: who is this addressed to? Faculty? <a href="https://odee.osu.edu/news/2016/05/23/saving-and-destroying-academic-records" rel="nofollow noreferrer">This helpful (and authoritative) source</a> suggests that it is directed to faculty, as does <a href="https://library.osu.edu/osu-records-management" rel="nofollow noreferrer">this</a>. </p>
