- 0
- 678 words
Your name. Your phone number. Your major. Your enrollment status. Even your photograph.
The University of Utah considers all of these potential directory information.
Yes, your photograph.
That’s the part of Utah CIS I find far more interesting than another registration feature or academic dashboard. The portal actually gives students some control over what the university can disclose about them. But unless you know what FERPA directory information means, there’s a decent chance you’ll never think to look for those settings.
And the distinction matters.
Public Information Doesn’t Mean Your Entire Academic Record
Under FERPA, educational records generally receive privacy protection. Grades, for example, aren’t simply available to anyone who asks.
Directory information is different.
The University of Utah identifies several categories that may be disclosed without individual consent, including a student’s name, contact information, field of study, attendance dates, academic standing, and degrees awarded.
The university also says it doesn’t distribute lists of student names, addresses, email addresses, or phone numbers to outside businesses and agencies.
Good. But that’s not the same as making every individual piece of directory information confidential.
Unless a student requests a restriction, directory information can still be disclosed under the university’s policies.
And that’s where CIS becomes useful.
The Setting Is Actually There
Open Utah CIS, go to the Student Homepage, select the Student Profile tile, and look for Privacy Restrictions.
That’s the area the Registrar identifies for students who want to restrict disclosure of their directory information.
No need to confuse this with changing a mailing address or editing a phone number. Those are ordinary profile updates.
A privacy restriction changes how the university handles requests for information about you.
There’s a rather serious catch, though.
The university’s published restriction form explains that requesting nondisclosure can also make it harder to obtain your own information remotely. The form warns that certain requests from the student may require presenting valid identification in person.
That’s a tradeoff worth understanding before switching anything on.
Privacy controls are useful. Privacy controls that come with consequences should explain those consequences plainly.
Your Parents Don’t Automatically Get a Free Pass Either
Another feature deserves its own discussion: FERPA Consent to Release.
Students can find it through the Student Profile tile in CIS.
This is where someone can authorize the university to disclose protected educational information to specific individuals.
It might be a parent. It might be somebody else the student trusts.
The important thing is that this is a deliberate authorization, not a blanket assumption that relatives are entitled to academic information.
I like that separation.
An adult student’s university record shouldn’t become a family group project just because somebody else wants an update.
And notice that these are two completely different controls:
Privacy Restrictions deal with limiting disclosure of directory information.
FERPA Consent to Release deals with authorizing disclosure of protected records to specified people.
One restricts access. The other grants permission.
Confusing them could produce exactly the opposite result from what somebody intended.
The Part I’d Change
Utah CIS puts these controls inside the Student Profile area, which makes organizational sense. But privacy is important enough that it shouldn’t feel like an obscure profile preference.
Students shouldn’t have to discover FERPA through an argument with a university office or a surprise information request.
The portal already contains the necessary tools. The Registrar even documents the differences between directory information, protected records, consent, and restrictions.
What I’d like to see is that explanation made unavoidable when students first set up their profiles.
Not a ten-page legal notice. Just a clear explanation of what information may be disclosed, what can be restricted, and what happens after a restriction is applied.
Because the most interesting thing about Utah CIS privacy isn’t the technology.
It’s that students have choices about their information that they might never realize they’re entitled to make.
And a privacy setting nobody knows about is a pretty limited form of control.
