FERPA Training for School Resource Officers and Campus Public Safety Professionals School resource officers (SROs) and campus public safety professionals often need student information to respond to threats, coordinate emergency care, and support investigations. Knowing which records may be shared, who may receive them, and what limits apply helps personnel make informed decisions during daily work and urgent situations.

This FERPA training course from HIPAAtraining.net explains how the Family Educational Rights and Privacy Act applies to school safety work. Across eight modules, learners examine education records, school law enforcement unit records, student health information, and requests from parents, investigators, and other outside parties.

The course uses plain language, visual explanations, and 12 fictional case scenarios to connect the rules to situations that school and campus safety personnel may face. Learners practice identifying a valid basis for access, choosing an appropriate sharing process, and recognizing when a request needs review by an authorized school official.

Course Highlights

  • Eight modules focused on student privacy and school safety responsibilities.
  • 110 slides with visual comparisons, decision steps, and module recaps.
  • Estimated learning time of 1 hour 7 minutes
  • 12 fictional case scenarios with reflection pauses and guided explanations.
  • Three worked examples covering a records request, an emergency disclosure log, and a digital evidence handoff.
  • Workplace technology topics, including artificial intelligence (AI) tools, privacy incidents, cybersecurity response, and digital evidence handling.
  • FERPA and HIPAA distinctions for student health information and emergency care coordination.

Who Should Take This Course

This course is designed primarily for personnel who work with student information as part of school safety or campus public safety duties, including:

  • School resource officers and school district police officers.
  • Campus police, public safety officers, and security personnel.
  • Local law enforcement officers assigned to work with schools or colleges.
  • School and campus threat assessment team members.
  • Supervisors responsible for school safety information sharing.

School administrators, safety coordinators, privacy staff, and records custodians who work with these teams may also benefit. The lessons include both elementary and secondary school situations and higher education examples.

What You Will Learn

By the end of the course, learners should be able to:

  • Recognize education records and student information that can identify a person directly or indirectly.
  • Identify when FERPA rights belong to a parent or an eligible student.
  • Distinguish qualifying law enforcement unit records from disciplinary files and copies of education records.
  • Recognize consent requirements and the conditions of common disclosure exceptions.
  • Explain how an SRO’s school duties affect access and later use of student information.
  • Identify the information sharing steps used during emergencies and threat assessments.
  • Recognize FERPA and HIPAA differences when handling student health, counseling, or disability information.
  • Route parent requests, subpoenas, media inquiries, and other outside requests through the appropriate review process.
  • Use approved communication tools, check AI output, and report possible privacy or cybersecurity incidents.
  • Preserve evidence, document required disclosures, and locate the local procedures that apply to their work.

Course Outline

Module 1: FERPA Foundations and Student Rights

Learn which institutions and records FERPA covers. Review education records, personally identifiable information, and the rights of parents and eligible students. The module also explains access and amendment requests and the difference between firsthand observations and information learned from student records.

Module 2: Law Enforcement Records, Video, and Evidence

Examine the conditions for the law enforcement unit record exclusion. Learn why an investigative original, a school disciplinary copy, and information supplied by a school may require different treatment. Topics include body camera footage, school video involving multiple students, evidence preservation, and the review of access or release requests.

Module 3: Consent, Access, and Information Requests

Review written consent, the school official exception, and legitimate educational interests. Explore the requirements for outside SROs, agreements with schools, directory information, court orders, subpoenas, and juvenile justice requests. Learn how purpose limits, later use, and disclosure documentation affect information sharing.

Module 4: Emergencies and Threat Assessment Teams

Understand FERPA’s health or safety emergency exception and its requirement for an articulable and significant threat, meaning a significant danger that can be explained from the available facts. Review appropriate recipients, necessary information, and required documentation. The module also addresses threat assessment teams and explains why a planned exercise does not itself qualify for the emergency exception. 

Module 5: Student Health, Counseling, and HIPAA

Explore how the record holder, purpose, and type of record affect student health information. Topics include school nurse records, treatment records, counseling information, disability records, and individualized education program information during a crisis. The module also introduces sensitive substance use treatment records and separates emergency care handoffs from later investigative requests.

Module 6: Campus Safety and Outside Disclosures

Review privacy considerations in campus safety alerts, disciplinary outcomes, and missing student responses. Learn about parent disclosures, news media requests, information shared across schools, and coordination with Title IX personnel. The lessons distinguish authorized safety communications from broader requests for student files.

Module 7: Technology, Safeguards, and Accountability

Learn how approved systems and appropriate access controls support responsible information handling. Review vendors, AI services, and the need to verify automated transcripts or summaries. Additional topics include privacy incident reporting, ransomware escalation, coordination with IT, digital evidence chain of custody, complaint rights, and FERPA enforcement.

Module 8: Putting the Rules Into Practice

Apply the course’s decision process to an incident involving different records and several recipients. Practice making focused requests and identifying the supporting information a reviewer needs. Review request checklists, local contacts, approved forms, and the school or agency procedures needed to put the lessons into practice.

Practice With School and Campus Scenarios

The course includes 12 fictional cases. Learners pause to consider the next action before reviewing an explanation of the relevant rule and its limits.

Examples include:

  • A parent requesting the conduct record of a college student who is 17.
  • Campus police and a school conduct office holding different copies of the same video.
  • A detective asking an SRO to share attendance information for an unrelated investigation.
  • A student crisis that raises an urgent request for information from an individualized education program.
  • A school medical emergency followed by a separate request for hospital test results.
  • Student information uploaded to a personal AI account without school approval.
  • An AI transcript incorrectly assigning a threatening statement to the wrong student.
  • One incident leading to requests from a parent, detective, reporter, and receiving clinician.

These cases help learners examine the purpose of each request and explain why a particular response is appropriate.

A Clear Process for Information Requests

Throughout the course, learners apply five checks:

  1. Source: Who created the record, and who maintains the particular copy?
  2. Purpose: Why is the information needed for this task?
  3. Authority: Does consent or an applicable FERPA exception support the disclosure?
  4. Scope: Which information and recipients fit that authority?
  5. Safeguards: How will access, delivery, documentation, and later use be controlled?

The five checks help organize a decision. Each request still depends on the applicable legal requirements and the institution’s approved process.

Course Format and Assessment

The course combines visual lessons, fictional cases, worked examples, and module recaps. Reflection pauses encourage learners to consider their own response before reviewing the explanation.

The lessons prepare learners for a separate assessment. Participants should also review their school or agency’s approved procedures, including records requests, emergency disclosures, technology use, and incident reporting.

About HIPAAtraining.net and Supremus Group

HIPAAtraining.net is operated by Supremus Group LLC, which was founded in 2006. The FERPA course gives school and campus public safety personnel structured lessons and realistic practice in handling student information.

Frequently Asked Questions

Yes. The course includes elementary and secondary school situations as well as college and university examples. It addresses school resource officers, campus public safety roles, parent and eligible student rights, and differences that can affect information sharing in each setting.

No. Access depends on a valid FERPA basis and the officer’s role in the specific task. Under the school official exception, relevant conditions include legitimate educational interest and, for outside personnel, school control over the use and maintenance of the records. A job title or working database login does not establish unrestricted access.

No. The law enforcement unit record exclusion applies to records created by the designated unit, created for a law enforcement purpose, and maintained by that unit. Education record information supplied by a school remains protected. Other laws and school policies can also affect the release of qualifying unit records.

Yes, when the conditions of FERPA’s health or safety emergency exception are met. The institution must identify an articulable and significant threat and appropriate recipients who need the information to help protect someone. It must record the threat that justified the disclosure and the parties who received the information. 

No. Student health records maintained by a school covered by FERPA, or a party acting for it, often fall under FERPA. FERPA education records and qualifying treatment records are excluded from HIPAA’s definition of protected health information. An outside covered healthcare provider may hold a separate record subject to HIPAA. The course explains why the holder and type of record matter.

Yes. Topics include approved AI tools, student information in prompts or uploads, inaccurate automated output, and possible privacy incidents. The course also covers cybersecurity escalation, coordination with IT, evidence preservation, and documentation of digital evidence transfers. The focus is on the responsibilities of public safety personnel within the institution’s response plan.

The presentation estimates 1 to 2 hours. Learners may need additional time for reflection, review, the separate assessment, or their institution’s local orientation.

Related Training

For personnel whose responsibilities also involve healthcare information or workplace technology, explore:

Ask About Individual or Group FERPA Training

Help your school or campus safety team make informed decisions about student records and lawful information sharing.

Contact HIPAAtraining.net for current pricing, enrollment information, or training options for your school, district, college, university, or public safety agency.

Email: Bob@hipaatraining.net
Phone: (515) 865-4591.

USER RATING:

FERPA Training for School Resource Officers and Campus Public Safety Professionals Course is rated 4.9 out of 5 by 91 users.