Student Privacy
USED Student Privacy Actions Timeline
This timeline chronicles major student privacy related announcements from and activities by the U.S. Department of Education (USED).
2025-03-27
Tags: FERPA · Investigation opened · California SEA · State education agency (SEA)
SPPO launched an investigation into the California Department of Education (CDE) for “allegedly abdicat[ing] the responsibilities FERPA imposes due to a new California state law [AB 1955] that prohibits school personnel from disclosing a child’s ‘gender identity’ to that child’s parent.” The Department said that “Given the number of LEAs that appear to be involved, SPPO is concerned that CDE played a role, either directly or indirectly, in the widespread adoption” of LEA practices ‘to socially transition children at school while hiding minors’ ‘gender identity’ from parents.”
2025-03-28
Tags: FERPA · Investigation opened · Maine SEA · State education agency (SEA)
SPPO launched a FERPA investigation into the Maine Department of Education following reports that dozens of Maine districts have policies that “allow for schools to create ‘gender plans’ supporting a student’s ‘transgender identity’ and then claim those plans are not education records under FERPA and therefore not available to parents.”
2025-03-28
Tags: FERPA · PPRA · Guidance, Notice, or Dear Colleague Letter · All LEAs and SEAs
USED announced that SPPO sent a Dear Colleague Letter (DCL) notifying school leaders “of their compliance obligations under the Family Educational Rights and Privacy Act (FERPA) and the Protection of Pupil Rights Amendment (PPRA)” and outlining SPPO’s “priority concerns.” The Department said that “Compliance with [FERPA and PPRA] means that schools must allow parents to review all education records of their student, including any document related to a student’s ‘gender identity.’”
2025-03-28
Tags: FERPA · PPRA · Guidance, Notice, or Dear Colleague Letter · All LEAs and SEAs
SPPO’s DCL and Cover Letter from Secretary McMahon. In the DCL, SPPO requested State Education Agencies (SEAs) to submit documentation by April 30, 2025 “to provide assurance that the SEA and their respective LEAs are complying with the provisions of FERPA and PPRA, specifically with regard to the priority concerns previously discussed.”
2025-03-28
Annual Notices for Superintendents and Chief State School Officers
Tags: FERPA · PPRA · Guidance, Notice, or Dear Colleague Letter · All LEAs and SEAs
SPPO sent letters to state and local education agencies of their responsibilities under FERPA and PPRA. Compared to previous years, there was an increased emphasis on PPRA requirements.
2025-04-04
Tags: Title IX · FERPA · PPRA · Announcements · DOJ Involvement · Washington SEA · State education agency (SEA)
USED and the Department of Justice (DOJ) announced that they formed a Title IX Special Investigations Team “to ensure timely, consistent resolutions to protect students, and especially female athletes, from the pernicious effects of gender ideology in school programs and activities.” The team includes ED Student Privacy Policy Office staff, and is named in the Department’s press release announcing FERPA and PPRA investigations into the Washington Office of the Superintendent of Public Instruction (OSPI).
2025-04-15
Tags: FERPA · Finding issued · Letter or demand · Middleton Cross Plains, WI · Local education agency (LEA)
SPPO sent a letter of finding to the Middleton Cross Plains Area School District (Wisconsin) in response to a FERPA investigation that began 12 years ago. The letter addresses a 2013 complaint regarding a parent being denied access to a student's education records in the form of emails and personal notes. SPPO found insufficient evidence of a FERPA violation regarding the emails, noting the evolving legal landscape and that the parent ultimately received the emails via state law. Regarding personal notes, SPPO concurred with the District that these fell under the "sole possession" exception to FERPA, thus were not subject to disclosure. Consequently, the complaint was closed due to an “absence of a finding of noncompliance in regard to either allegation.” SPPO apologized for significant delays in its investigation.
2025-04-30
Tags: FERPA · PPRA · Title IX · Investigation opened · Washington SEA · DOJ Involvement · State education agency (SEA)
The Title IX Special Investigations Team launched FERPA and PPRA investigations into the Washington Office of the Superintendent of Public Instruction (OSPI) following “a letter of finding from OSPI to the La Center School District (La Center) earlier this year [which] raised concerns that OSPI is requiring districts to implement policies, such as mandating that districts not notify parents of a change in their child’s ‘gender identity,’ which violate federal parental rights laws.”
2025-08-14
Tags: FERPA · Title IX · Investigation opened · KCKPS, KS · Olathe, KS · Shawnee Mission, KS · Topeka, KS · Local education agency (LEA)
OCR and SPPO announced that it launched FERPA and Title IX investigations into four Kansas districts: Kansas City, Kansas Public School District (KCKPS); Olathe Public Schools (OPS); Shawnee Mission School District (SMSD); and Topeka Public Schools (TPS). The Department received a complaint alleging that the districts’ policies “prevent school officials from disclosing a student’s ‘transgender status’ to their parents without the student’s consent.”
2025-08-25
Tags: PPRA · Investigation opened · Burlington, MA · Local education agency (LEA)
SPPO opened a PPRA investigation into Burlington Public Schools (Massachusetts) for allegedly “failing to comply with parents’ written requests to opt their children out of a survey that asked students questions about sensitive topics, including drug and alcohol use, sexual encounters, and ‘gender identity.’” The Department received “several complaints” that “despite opting their children out of a 2025 ‘Youth Risk Behavior Survey,’ or out of all surveys administered by the school, parents discovered that the district nonetheless administered the survey to their children.”
2025-09-29
Tags: PPRA · Investigation opened · Fairfax County, VA · Local education agency (LEA) · Marked historical
SPPO initiated a PPRA enforcement action against Fairfax County Public Schools (Virginia) following reports that “a Centreville High School social worker reportedly scheduled an abortion appointment for a 17-year-old student, paid the required clinic fees, and swore the girl to secrecy without informing the student’s parents” while “A second student was allegedly pressured by the social worker to have an abortion, with the social worker reportedly telling her she ‘had no other choice’ and directing her to the same clinic for an abortion procedure, which the student did not ultimately undergo.” The Department required “Fairfax to investigate this matter and provide a written response by October 17” addressing listed issues.
2026-01-28
Tags: FERPA · Finding issued · California SEA · State education agency (SEA) · Marked historical
SPPO announced that it found CDE in violation of FERPA following its March 2025 investigation “for policies that pressure school officials to conceal information about students’ ‘gender identity.’” The Department stated that it “offered CDE the opportunity to voluntarily resolve” the issues by taking listed actions.
2026-02-05
Tags: FERPA · Investigation opened · Tufts University · National Student Clearinghouse · Higher ed · Vendor or service provider · Marked historical
SPPO announced FERPA investigations into Tufts University (Massachusetts) and the National Student Clearinghouse following “multiple reports alleging that the process of compiling NSLVE data involves illegally sharing college students’ data with third parties to influence elections.” The Department references a DCL issued the same day, in which “SPPO makes clear in this guidance that any institution that utilizes NSLVE data – set to be released this year – could be at risk of being found in violation of FERPA.”
2026-02-05
Tags: FERPA · Guidance, Notice, or Dear Colleague Letter · Higher ed
SPPO’s DCL noting “concerns about the NSLVE’s use of the directory information and studies exceptions to prior written consent under FERPA.” The Department cautions that “Institutions intending to utilize any NSLVE report or data this year are advised to wait to do so until the Department has completed its investigations into Tufts University and the National Student Clearinghouse,” writing that “Any IHE that utilizes NSLVE data released in 2026 could be at risk of being found in violation of FERPA.”
2026-04-17
Tags: FERPA · Finding issued · Resolution or referral · KCKPS, KS · Olathe, KS · Shawnee Mission, KS · Topeka, KS · Local education agency (LEA)
USED announced that that it found Kansas districts in violation of FERPA following its August 2025 investigation: “Based on a lack of substantive documentation submitted by the Districts, SPPO found that [TPS, SMSD, OPS, and KCKPS] had policies that were likely to prevent schools from notifying parents of their child’s so-called ‘gender transition,’ even if the parent requested their child’s records, thereby violating parents’ rights under FERPA to access school records pertaining to their children.” USED noted that it “issued proposed Resolution Agreements to the Districts” specifying actions to remedy FERPA violations.
2026-05-12
Tags: FERPA · Edtech · Letter or demand · Instructure · Vendor or service provider
SPPO sent a letter to Instructure Holdings following “cybersecurity incidents [that] resulted in unauthorized access to student education records, and therefore violations of FERPA likely occurred.” The Department asked Instructure to provide requested information related to the incidents and the organization’s cybersecurity practices by May 25, 2026.
2026-06-11
Tags: Title IX · FERPA · Resolution or referral · Letter or demand · KCKPS, KS · Olathe, KS · Shawnee Mission, KS · Topeka, KS · Local education agency (LEA)
OCR announced that it sent “Letters of Impending Enforcement Action to [OPS], [SMSD], and [TPS to] notify the Districts that they have 10 calendar days to come into compliance or face enforcement action, potentially including referral to [DOJ] and the termination of federal funding.” The Department also sent a “Letter of Impasse to [KCKPS] notif[ying] the District that the Department is preparing for impending enforcement, which, following the Department’s regulatory procedures, could result in the termination of the Districts’ federal education funding.” The Department claimed that “Despite receiving OCR’s proposed Resolution Agreements, which, if implemented, would remedy the Districts’ violations of Title IX, the Districts continue to take no action to protect women and girls and have failed to uphold parents’ rights to inspect their children’s educational records.”
2026-06-16
Tags: FERPA · PPRA · Announcements · DOJ Involvement
USED announced four new Inter-Agency Agreements (IAA), one of which assigned the DOJ's Civil Rights Division a role in enforcing the FERPA and PPRA.
2026-06-18
Tags: Title IX · Investigation opened · Ann Arbor, MI · Local education agency (LEA)
OCR announced a Title IX investigation into Ann Arbor Public Schools (Michigan) for allegedly having “policies allowing males to compete on women’s sports teams” and allowing a male to use “female-only locker rooms to undress.” Note that the Department did not include FERPA-related allegations in this press release, but we include it in our timeline because of SPPO’s FERPA enforcement announcement against the district nine days later (July 27). Prior to July 27, this is the only potentially relevant information on the Department’s website related to Ann Arbor.
2026-06-30
U.S. Department of Education Partners with the U.S. Department of Justice to Protect Parental Rights
Tags: FERPA · Resolution or referral · KCKPS, KS · DOJ Involvement · Local education agency (LEA)
USED announced that SPPO will work with the DOJ's Civil Rights Division to “take appropriate enforcement measures, including applicable judicial proceedings and potential loss of federal funding, for [KCKPS]’s failure to substantially comply with the requirements under FERPA.” The Department alleged that KCKPS “maintained a policy stating that school personnel ‘should not disclose information that may reveal a student’s transgender status or gender nonconforming presentation to others, including parents.’” It also noted that its “investigation revealed clear evidence that District administrators positively reject their legal responsibility to honestly answer parents’ inquiries about their children’s health and wellbeing.”
2026-07-27
Tags: FERPA · Finding issued · Resolution or referral · Anne Arundel, MD · Ann Arbor, MI · DOJ Involvement · Local education agency (LEA)
SPPO announced partnering with DOJ “to take enforcement action against Anne Arundel County [Maryland] after determining the District improperly classifies information about a student’s so-called ‘gender identity’ as ‘confidential medical information’ that cannot be shared with parents.” The Department alleged an instance “When the parents approached school administrators about the matter, the principal declined to provide details about the student’s ‘gender transition,’ and the assistant principal refused to turn over the child’s relevant records.”
SPPO also announced a finding that an Ann Arbor Public Schools (Michigan) “policy requiring school employees to hide a child’s ‘transgender status’ from his or her parents likely violates FERPA.” The Department gave the district “until August 10th to demonstrate why ED and DOJ should not move forward with enforcement,” requiring Ann Arbor to “justify its policy that directs school officials to maintain records related to a student’s so-called ‘gender identity’ in a separate filing system or be subjected to imminent enforcement action.”
2026-07-28
Tags: PPRA · Title IX · Investigation opened · Bethel, WA · Denver, CO · Local education agency (LEA)
SPPO launched a PPRA investigation into Bethel School District (Washington) following reports that a Pride Month Display “exposed students to vials of testosterone – a controlled substance often prescribed for so-called 'gender transitioning.'” The Department says it will investigate whether Bethel School District staff “encourage students to undergo medical procedures without parental consent," as well as "whether the District allows parents to view instructional materials upon request and if parents were given the opportunity to opt their children out of surveys, examinations, or any other type of evaluation for which PPRA requires parental consent."
SPPO also announced a PPRA investigation into Denver Public Schools (Colorado) for allegations that a high school teacher “required students of the same sex to kiss each other in front of the classroom as part of a class assignment,” with the Department “investigat[ing] whether parents were notified about this student evaluation and whether parent or student opt-outs or complaints were ignored.”
2026-07-29
Tags: PPRA · Investigation opened · Minnesota SEA · State education agency (SEA)
USED announced a PPRA investigation into the Minnesota Department of Education (MDE) following a complaint in which “parents expressed their concern that their statutory and constitutional rights were violated as they were not notified or given the opportunity to opt their children out of an activity that used ‘transgender dolls’ in the classroom.” The Department referenced news reporting that “‘MyGenderDolls’ will be available to Minnesota educators for use in classrooms with students as young as four years old this fall,” and said that “The dolls – developed via a taxpayer-funded University of Minnesota program – feature removable, interchangeable internal and external genitalia, gender-neutral names, and clothing (including undergarments) for both sexes.”
2026-07-29
Tags: PPRA · Finding issued · Resolution or referral · Burlington, MA · Local education agency (LEA)
SPPO announced their determination that Burlington Public Schools (Massachusetts) violated PPRA “by requiring student participation in a survey containing sensitive, sexually explicit questions after parents expressly requested that their children not partake,” following its August 2025 investigation. The Department also claimed that the district “admitted that it administered the 2025 ‘Youth Risk Behavior Survey’ to students despite receiving opt out notices from several families.” The Department “proposed a Resolution Agreement to voluntarily resolve the District’s violations of the PPRA,” requiring Burlington to take listed corrective actions.
2026-07-30
Tags: FERPA · Letter or demand · California SEA · Washington SEA · State education agency (SEA)
SPPO “demanded updated information from [CDE and OSPI] regarding policies governing schools’ disclosure of records to parents in light of recent rulings in the U.S. Supreme Court and the U.S. Circuit Court of Appeals for the Ninth Circuit, both of which bolster the legal rights of parents.” The Department “request[ed] that the CDE and OSPI immediately detail their plans to revise their policies and practices in light of” Mirabelli v. Olson and the City of Huntington Beach v. Newsom
2026-08-25
Tags: FERPA · Resolution or referral · Topeka, KS · Olathe, KS · Shawnee Mission, KS · DOJ Involvement · Local education agency (LEA)
SPPO announced “it has entered a Resolution Agreement with” TPS, in which the district “promises to uphold parental rights and come into compliance with federal law by taking substantial corrective action.” The Department said that it “proposed similar Resolution Agreements to [OPS] and [SMSD],” but that “these Districts refused to come into voluntary compliance with FERPA.” As a result, USED announced that it is partnering with the DOJ's Civil Rights Division “to take appropriate enforcement measures against [OPS] and [SMSD] for failing to substantially comply with FERPA.”
2026-08-26
Tags: FERPA · PPRA · Guidance, Notice, or Dear Colleague Letter · All LEAs and SEAs
SPPO announced that it sent a DCL and annual notifications “amid rampant reports of schools withholding critical information from parents, such as maintaining records related to a child’s ‘gender’ separately in order to keep them hidden from parents.” The press release announced “that SPPO will consider… surveys [revealing sensitive categories of information under PPRA to be] ‘required’ when administered by an educator, counselor, or other school official and that an opt-out policy is not sufficient to secure parental consent.”
2026-08-26
Tags: FERPA · PPRA · Guidance, Notice, or Dear Colleague Letter · All LEAs and SEAs
SPPO’s DCL. The DCL outlined “several areas of concern identified over the last year” that “SPPO is taking proactive measures to address,” including: Non-Compliance with PPRA; Annual Notifications of Rights; Parental Right to Inspect and Review Education Records; Outsourcing Institutional Services or Functions; Use of Personal Devices and Online Educational Services/Mobile Apps in the Classroom; and Military Recruiters.
2026-08-26
Annual Notices for Superintendents and Chief State School Officers
Tags: FERPA · PPRA · Guidance, Notice, or Dear Colleague Letter · All LEAs and SEAs
SPPO sent letters to state and local education agencies of their responsibilities under FERPA and PPRA. Compared to the annual notices issued last year, the Department made several changes to reflect that parental opt-out policies are no longer sufficient for any surveys issued at school addressing the eight protected categories of information under PPRA.
2026-09-01
Tags: FERPA · PPRA · Lawsuit · Resolution or referral · KCKPS, KS · DOJ Involvement · Local education agency (LEA)
USED announced that the DOJ's Civil Rights Division and the U.S. Attorney for the District of Kansas filed a “first-of-its-kind” lawsuit against KCKPS alleging the district is violating FERPA and PPRA. The Department said that “Because KCKPS’s policies and practices violate core parental rights secured by FERPA and PPRA, the lawsuit seeks an injunction to halt the Transgender Guideline’s enforcement, among other relief.”