Controlled Unclassified Information (CUI)

CUI Registry: Privacy-Student Records


Category-Subcategory: Privacy-Student Records
Category Description:

Refers to personal information, or, in some cases, "personally identifiable information," as defined in OMB M-17-12, or "means of identification" as defined in 18 USC 1028(d)(7).

Subcategory Description: As per 20 USC 1232g, the Family Educational Rights and Privacy Act of 1974, an education record which is comprised of those records which are directly related to a student.
Marking: STUD


  • CUI Specified authorities include specific handling practices that differ from general CUI requirements. For Specified authorities, reference individual Safeguarding/Dissemination control citations for distinct requirements
  • Whether CUI is Basic or Specified is determined by the applicable Safeguarding and/or Dissemination Authority for that CUI.
  • Each "Safeguarding and/or Dissemination Authority" citation links to the statute, regulation or government-wide policy authorizing the control of that information as CUI.
  • Each "Sanctions" authority links to the statute, regulation or government-wide policy that includes penalties for CUI misuse of CUI for the associated "Safeguarding and/or Dissemination Authority" on the same line.

Safeguarding and/or Dissemination Authority Basic or
20 USC 1232g(a)(1)(C) Basic  
25 CFR 43.14 Basic  
25 CFR 43.22 Specified  
34 CFR 99.30(a) Basic  
34 CFR 99.31(a)(6)(ii) Basic  
34 CFR 99.33(a)(1) Basic  



Authority links are updated based on regular re-publication of the United States Code and Code of Federal Regulations, and the CUI Registry maintenance schedule.