For school administrators, district compliance officers, and university records managers across New York, the Family Educational Rights and Privacy Act (FERPA) is a central compliance obligation that governs not just how student records are stored and shared, but also how they must be disposed of when they are no longer needed. FERPA compliance and student record shredding for New York schools require careful attention to both federal law and New York State Education Department guidance to ensure that student privacy is protected throughout the entire lifecycle of an educational record.
New York has one of the largest and most diverse educational ecosystems in the United States — encompassing over 700 school districts, hundreds of private schools, dozens of colleges and universities, and thousands of charter schools. Each of these institutions is subject to FERPA’s requirements regarding the maintenance and disposal of student education records. Understanding what FERPA requires — and how New York State rules supplement those requirements — is essential for any educational institution looking to manage its records responsibly.
What FERPA Requires for Student Record Management and Disposal
FERPA, the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g), was enacted in 1974 and gives parents the right to access their child’s educational records, the right to request amendments to inaccurate records, and the right to control the disclosure of education records to third parties. These rights transfer to the student at age 18 or when the student begins attending a postsecondary institution.
FERPA does not specify a minimum retention period for student records — that is left to individual institutions and, in New York, to the State Archives records retention schedules. However, FERPA does regulate when and how records may be destroyed. Schools must notify parents or eligible students before destroying records that are the subject of a pending rights request. Outside of that restriction, institutions must ensure that when education records are destroyed, the destruction method prevents unauthorized access to the information. For paper records, this means professional cross-cut shredding. Review our compliance resources to understand how certified shredding supports FERPA compliance.
- Permanent records (transcripts, graduation dates): Typically retained permanently or until the institution closes
- Temporary records (attendance, discipline, health): New York typically requires 3–6 years after graduation or withdrawal
- Special education records under IDEA: Must be retained for 5 years after the student exits the program
- Financial aid records: 5 years after the award year under federal Title IV regulations
New York State Archives Retention Schedules for School Records
The New York State Archives has established Records Retention and Disposition Schedules (ED-1) for local education agencies, including school districts and BOCES. These schedules specify minimum retention periods for dozens of categories of student and administrative records and represent the most authoritative guidance available for New York schools on how long records must be kept before they can be legally destroyed.
Under the ED-1 schedule, key retention periods for common student records include:
- Student permanent record cards and transcripts: Retain permanently
- Attendance registers and student enrollment records: 5 years
- Disciplinary records: 3 years after the student leaves the district
- Health and immunization records: 3 years after student leaves
- Special education records (IEPs, evaluations): 5 years after student exits special education
- Test answer sheets (standardized tests): 1 year
Once these retention periods have elapsed and records no longer need to be preserved, they must be destroyed securely. The State Archives recommends that schools use a method of destruction that makes reconstruction of the records impossible — consistent with the use of professional shredding services. Schools should document the destruction by maintaining a destruction log or obtaining a Certificate of Destruction from their shredding provider.
Special Education Records and IDEA Compliance
Special education records present unique compliance challenges for New York schools. Under the Individuals with Disabilities Education Act (IDEA) and its implementing regulations, schools must notify parents when special education records are no longer needed for providing educational services. Parents may request a copy of the records before they are destroyed. Schools must retain these records for a minimum of five years after the student exits special education services before they may be destroyed.
The intersection of IDEA, FERPA, and New York State Education Department requirements means that special education departments at New York schools must maintain clear tracking systems for IEPs, evaluation reports, eligibility determinations, and related service records. When the retention period expires and parents have been properly notified, all special education records must be destroyed using a method that prevents unauthorized reconstruction. Our on-site shredding services can process large volumes of special education records efficiently and securely at your school’s location, with a Certificate of Destruction provided upon completion.
FERPA-Compliant Record Disposal for New York Colleges and Universities
Colleges and universities in New York face FERPA obligations that differ somewhat from K-12 schools. At the postsecondary level, FERPA rights belong to the student rather than the parent. This means that higher education institutions must be particularly careful when students request to inspect their records before disposal, as the institution must honor that right before proceeding with destruction.
New York colleges and universities typically maintain separate retention schedules for academic records, financial aid records, student conduct records, and administrative records. Admissions files for students who were not enrolled may generally be destroyed after one to three years. Student conduct records typically must be retained for five to seven years after the student graduates or withdraws. Financial aid records must be retained for five years after the award year under federal regulations. Contact us to set up a compliant record destruction program for your institution.
Given the volume of records generated by large universities, many New York institutions benefit from scheduled shredding programs with locked consoles placed in administrative offices, registrar’s offices, and financial aid departments. This ensures continuous, compliant destruction of records reaching the end of their retention period without the need to manually manage a purge process.
Protecting Student Data During the Document Destruction Process
One of the most important but often overlooked aspects of FERPA compliance is ensuring that student data is protected during the document destruction process itself — not just before and after. Records that are boxed up and placed in an unsecured storage area awaiting destruction are still subject to FERPA protections. If an unauthorized person accesses those boxes before they are shredded, the school could face a FERPA violation.
Best practices for protecting student records during the destruction process include:
- Storing records awaiting destruction in locked containers or locked rooms
- Using locked security consoles provided by your shredding company for ongoing document accumulation
- Scheduling shredding pickups frequently enough that records do not accumulate unsecured for extended periods
- Ensuring that any third-party shredding vendor signs a confidentiality agreement or data processing agreement
- Obtaining a Certificate of Destruction from the shredding provider after each job
New York Shredding provides locked security consoles for ongoing accumulation of records awaiting destruction, ensuring that student data is always protected from the moment it is designated for destruction until it is irretrievably shredded. Our service area covers all five boroughs, Long Island, Westchester, and the Hudson Valley.
Why New York Businesses Choose New York Shredding
For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.
Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.
Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.