Brooklyn College – Privacy and FERPA Statements

Safeguarding Online Information
Brooklyn College, CUNY

Brooklyn College is committed to ensure the confidentiality of user information, database records and online transactions. Brooklyn College online tools incorporate security features for safeguarding student IDs and accounts, and the information users transmit to the college during an online session.

Security Features

Data Encryption

For users' protection, Brooklyn College requires 128-bit Secured Socket Layer (SSL) strong encryption during users' online sessions with Web Services. Encryption is a sophisticated way of scrambling all information transmitted online before it leaves a user's computer, so that all information, including passwords and online bill payments, are completely unreadable by unauthorized third parties. No transactional information will be transmitted without first being encrypted.

Brooklyn College requires that a user's Web browser support 128-bit encryption because it is more effective than 40-bit encryption. While 40-bit encryption might be fine for low-risk transactions, it is not adequate for protecting financial transactions. When students supply data via the Internet, it is encrypted before it travels across the World Wide Web. Brooklyn College decodes and processes the data at our end of the transaction process. When we provide data to users, the data is encrypted by the college and sent to the user. When the user receives the data or information, his or her browser decodes the information and displays it to them.

Users can ensure that online information is encrypted in Internet Explorer or Netscape if the small key or lock at the bottom left-hand or right-hand corner of their screen is latched.

Database Server Security

Brooklyn College database servers are protected behind secure firewalls to prevent unwarranted access from the Internet and are protected by multilayered password and encryption security.

Family Educational Rights and Privacy Act (FERPA)

What is FERPA (Family Educational Rights and Privacy Act)?

The Family Educational Rights and Privacy Act of 1974, as amended (also sometimes referred to as the Buckley Amendment), is a federal law regarding the privacy of student records and the obligations of the institution, primarily in the areas of release of the records and the access provided to these records. Any educational institution that receives funds under any program administered by the U.S. Secretary of Education is bound by FERPA requirements. Institutions that fail to comply with FERPA may have funds administered by the Secretary of Education withheld.

What are education records?

Under FERPA, education records are defined as records that are directly related to a student and are maintained by an education agency or institution or by a party acting for the agency or institution. Education records can exist in any medium, including: typed, computer generated, videotape, audiotape, film, microfilm, microfiche and e-mail, among others.

What is directory or public information?

FERPA has specifically identified certain information called directory information that may be disclosed without student consent.

Brooklyn College has designated the following information as directory information and will release this information, unless the student has submitted a request for nondisclosure:

  • name
  • attendance dates (periods of enrollment)
  • address
  • telephone number
  • date and place of birth
  • photograph
  • e-mail address
  • full- or part-time status
  • enrollment status (undergraduate, graduate)
  • level of education (credits) completed
  • major field of study
  • degree enrolled for
  • participation in officially recognized activities other than sports
  • participation in sports (teams)
  • height if member of athletic team
  • weight if member of athletic team
  • previous school attended
  • degrees received
  • honors and awards received

Under the provisions of the Family Educational Rights and Privacy Act of 1974, as amended, you have the right to withhold the disclosure of the "Directory Information" listed above.

Request to Prevent Disclosure of Directory Information
Request to Allow Disclosure of Non-Directory Information