Report a FERPA Concern
Kansas State University is committed to full compliance with the Family Educational Rights and Privacy Act of 1974 (FERPA), a federal law that governs the privacy of student education records. FERPA restricts the disclosure of student information without the student’s explicit written consent.
As part of this commitment, the University holds all faculty, staff, and employees responsible for understanding and adhering to FERPA regulations. Employment at K-State requires compliance with University policies, Kansas Board of Regents regulations, and all applicable local, state, and federal laws.
If you believe a FERPA violation has occurred, whether in a personal interaction, classroom or office setting, university event, or any form of communication—you have the right to report your concern.
To submit a concern, please email the University Registrar at registrar@ksu.edu. Anonymous submissions are permitted; however, we will be unable to provide follow-up communication unless you include your contact information.
Please include the following information in your report:
-
Your Name, K-State Email Address, and Wildcat ID (WID)
-
Student Information (if reported by faculty or staff)
-
Description of the incident and why you believe it may be a FERPA violation
-
Individuals involved (including faculty/staff names, if known)
-
Date and approximate time the incident occurred
-
Location
-
Additional documentation or relevant communication related to the concern
-
Any follow-up or subsequent interactions regarding the incident
Reports must be submitted within 180 calendar days of the alleged incident. Requests for exceptions will be reviewed on a case-by-case basis if a compelling reason for the delay is provided.
Please note: Submitting a concern does not automatically indicate that a FERPA violation has occurred. This process is intended to initiate an internal review to determine whether a breach of FERPA has taken place.
Once your report is received, the Office of the Registrar will initiate a review. The person submitting the concern may be contacted for further details. Individuals named in the report may also be contacted. After all relevant information is gathered, it will be reviewed by the Office of the Registrar's internal FERPA group.
Findings will be shared with appropriate university personnel. While the outcome (i.e., whether a violation occurred) may be shared, specific disciplinary or personnel actions may not be disclosed due to privacy regulations.
The review process typically takes ten (10) to twenty (20) business days, depending on the complexity of the situation, the number of individuals involved, and the time of year.
Faculty and Staff: If a faculty or staff member is involved in the reported concern, their direct supervisor or unit head may be notified and included in any follow-up discussions as appropriate.