A parent calls the University of Utah to ask about a tuition charge. A spouse wants to discuss a student’s financial aid. A family member needs to speak with an academic advisor about a registration problem.
These requests might sound routine, especially when the person calling is helping pay for college.
But university employees generally cannot discuss a student’s protected educational records with someone else simply because that person is a parent, spouse, or relative.
The University of Utah follows the Family Educational Rights and Privacy Act, commonly known as FERPA.
Students can use Campus Information Services (CIS) to authorize the release of certain educational information to designated individuals.
The process involves a FERPA Consent to Release Form and a student-created verification PIN.
Although the procedure isn’t particularly complicated, misunderstandings are common. Some people assume the PIN provides full account access. Others believe a parent automatically has permission to discuss grades or financial aid.
Neither assumption is generally correct.
Here’s how the University of Utah’s FERPA authorization process works, where to find it in CIS, and what students should consider before sharing information.
What Is a FERPA PIN at the University of Utah?
A FERPA PIN is a verification code created by a student as part of the university’s Consent to Release process.
It helps university departments verify that a person requesting protected information has been authorized by the student.
The PIN is not the same as the student’s CIS password.
It doesn’t replace the university’s normal authentication requirements or provide unrestricted access to the student account.
Instead, it supports a specific purpose: allowing university personnel to verify authorization before discussing protected information.
The University of Utah explains that designated individuals may need the student’s university ID number, known as the uNID, and the student-created FERPA PIN.
Departments may also require additional identification.
This means authorization and identity verification are two separate parts of the process.
A person must be designated by the student and must satisfy the department’s verification requirements.
Why Does the University Require FERPA Authorization?
FERPA is a federal law that protects the privacy of student educational records.
At the University of Utah, protected information can include academic records, financial aid details, tuition information, and other personally identifiable educational information.
University employees generally need the student’s consent before releasing protected information to a third party, unless a legal exception applies.
This becomes particularly relevant when students enter college.
Parents who previously communicated directly with a high school about grades, attendance, or academic progress may find that university procedures are different.
Under FERPA, rights generally transfer to the student when the student turns 18 or begins attending a postsecondary institution, regardless of age.
That doesn’t prevent parents from helping.
It means the university must follow the appropriate authorization process before disclosing protected records.
Where to Find the FERPA Consent Form in Utah CIS
The University of Utah provides the consent form through its official Campus Information Services portal.
Official CIS website:
According to the university’s Registrar and Academic Advising instructions, students can locate the form through their Student Homepage.
The process is:
- Open the official Utah CIS website.
- Sign in using your university credentials.
- Select Student Homepage (Registration, Grades/Transcripts, Tuition).
- Open the student profile tile displaying your name and university ID.
- Find FERPA Consent to Release Form in the profile navigation.
- Read the form and choose the departments covered by your authorization.
- Create a FERPA PIN.
- Enter the information for the people you’re authorizing.
- Save the completed form.
The university’s instructions may refer to the feature as FERPA Release Consent or FERPA Consent to Release Form.
The wording and navigation can vary between university instructions and interface versions.
If you don’t see the expected option, check your student profile area before assuming the feature is unavailable.
How to Create Your FERPA PIN
The PIN is created during the consent process.
After opening the form, the student selects the departments authorized to disclose information.
The university’s Financial Aid and Scholarships instructions specifically mention selecting the Financial Aid/Scholarship/Income Accounting option when authorizing those offices.
Students can also select other departments covered by the form.
Next, the student creates a PIN and provides information identifying the individuals who may receive protected information.
The form requests details such as the designated person’s name, relationship to the student, and email address.
After saving the form, the student can provide the verification information to the authorized person.
What Should You Do After Creating the PIN?
Confirm that the form has been saved.
Then explain to the designated individual which university departments you’ve authorized.
Give the person the verification information they need through an appropriate private channel.
Avoid posting the PIN publicly or sending it to people who aren’t supposed to receive it.
Although a FERPA PIN isn’t an account password, it still serves an important verification purpose.
It should be treated as sensitive information.
What Information Can Parents Access With a FERPA PIN?
The answer depends on the authorization the student provides.
The University of Utah identifies several areas where FERPA authorization may be relevant.
These include:
- Financial aid and scholarships.
- Tuition and student financial information.
- Registrar records.
- Housing and dining programs.
- Academic advising.
However, creating a FERPA PIN doesn’t automatically mean every university department can disclose every record.
Students select the departments covered by the consent.
A parent authorized to discuss financial aid shouldn’t assume that the same authorization necessarily covers academic advising or housing records.
Likewise, the university may apply additional verification procedures before releasing information.
A FERPA authorization permits certain disclosures. It doesn’t require a department to provide information beyond what the authorization and applicable law allow.
Can Parents View Their Student’s Grades Through CIS?
A FERPA PIN doesn’t automatically create a separate parent dashboard inside CIS.
This is one of the most important distinctions.
The University of Utah’s consent process allows designated individuals to receive protected information through authorized university channels.
It isn’t the same as giving someone the student’s personal account credentials.
A parent shouldn’t expect to enter the student’s FERPA PIN on the CIS login page and immediately see grades, transcripts, or tuition records.
The PIN is used for verification when communicating with university personnel under the applicable consent.
If a parent needs to discuss academic performance, the student should confirm that the appropriate department is included in the authorization.
The university can then explain what information may be disclosed and through which channels.
Does Paying Tuition Give a Parent Access to Student Records?
Not automatically.
A parent may pay a substantial portion of a student’s tuition without having unrestricted access to protected educational information.
Payment responsibility and FERPA authorization are different matters.
For example, a parent might pay a tuition bill but still need the student’s consent before university staff can discuss certain account details.
FERPA contains exceptions, including provisions involving parents who claim students as dependents for federal income tax purposes.
However, those exceptions shouldn’t be interpreted as a universal guarantee of access.
University policy and the circumstances of the request still matter.
The simplest approach for routine family communication is for the student to complete the appropriate authorization.
That creates a clearer record of who may receive information.
Can You Authorize More Than One Person?
The University of Utah’s instructions allow students to create a list of designated individuals.
The form requests identifying information for each authorized person.
This can be useful when more than one family member helps with university matters.
For example, a student may want both parents to discuss financial aid questions.
Another student might authorize a spouse and a parent.
The university’s instructions describe entering the names and email addresses of the people who may receive information.
Students should ensure that the list reflects their current wishes.
Authorization shouldn’t be granted casually simply because someone requests it.
Only designate people you actually want to receive the relevant information.
Does a FERPA PIN Work for Academic Advising Appointments?
Yes. The University of Utah’s Undergraduate Academic Advising office specifically explains that students need a FERPA PIN to discuss their academic records during online or telephone appointments.
This is relevant even when the student is contacting the university about their own record.
The university may use the PIN to verify identity before discussing protected information remotely.
That means a FERPA PIN isn’t exclusively a tool for parents or other third parties.
It can also be part of the student’s own identity-verification process.
For example, a student scheduling a telephone advising appointment may be asked to provide the appropriate verification information.
Students should create their PIN before the appointment rather than waiting until the conversation begins.
This can help avoid unnecessary delays.
What Information Does an Authorized Person Need?
The University of Utah’s advising guidance explains that designated third parties may need several pieces of information to verify their authorization.
These include the student’s name, uNID, and FERPA PIN.
The university also identifies official government-issued identification as part of its verification requirements for authorized individuals.
The exact procedure may depend on whether the communication takes place by telephone, electronically, or in person.
For example, a department handling a telephone request may use a different verification workflow from an in-person office.
The important point is that possession of a PIN alone doesn’t necessarily establish unrestricted authority.
The individual must also be properly designated and verified.
FERPA PIN vs. CIS Password: What’s the Difference?
These credentials serve different purposes.
| Feature | FERPA PIN | CIS password |
|---|---|---|
| Primary purpose | Verification for protected-record discussions | Authentication for university account access |
| Created or managed by | Student through FERPA consent process | University account authentication system |
| Intended for authorized third parties | Yes, when designated | No |
| Opens the CIS dashboard | No | Used as part of the normal sign-in process |
| Replaces university authentication | No | Part of account authentication |
| Should be shared publicly | No | No |
A parent who wants to discuss a tuition question generally shouldn’t need the student’s CIS password.
Similarly, an academic advisor shouldn’t require the student to give an account password to a family member.
Using the proper FERPA authorization process helps keep account access separate from permission to discuss records.
Can You Change or Remove Someone’s FERPA Authorization?
Yes. The University of Utah states that students can update their FERPA PIN and the list of authorized third parties.
This is useful when circumstances change.
For example, a student might initially authorize a parent to help with financial aid questions.
Later, the student may prefer to manage those matters independently.
Another student might need to add a spouse or update the contact information for an existing authorized person.
The student can return to the appropriate consent process in CIS to review the authorization.
The university’s guidance confirms that the list and PIN can be updated.
Students should review their authorization periodically, especially after changes in family circumstances or financial arrangements.
If the available interface doesn’t clearly explain how to remove a designation, contact the Registrar or the relevant university office.
Don’t assume that changing your CIS password automatically revokes FERPA consent.
They are separate systems with different purposes.
What If You Forgot Your FERPA PIN?
A forgotten FERPA PIN can create problems when you need to discuss protected records over the phone.
However, it doesn’t necessarily mean your CIS account is inaccessible.
The PIN is separate from your normal sign-in credentials.
If you can still sign in to CIS, return to the FERPA consent area in your student profile.
Review the available options for updating the PIN.
The university confirms that students can change their FERPA PIN, although the precise interface steps may vary.
If you can’t find the relevant option, contact the appropriate university office for assistance.
Avoid repeatedly guessing the PIN when communicating with university staff.
It’s better to follow the official verification or update procedure.
What If You Can’t Access Utah CIS?
Students who no longer have CIS access may need a different process.
The University of Utah’s Undergraduate Academic Advising office provides an alternative Release of Information form for certain former students who cannot complete the online consent form.
However, the office notes that its alternative form applies to Academic Advising Center offices.
Other university departments may require separate authorization procedures.
This distinction matters.
A former student who wants to authorize someone to discuss advising records shouldn’t assume that one departmental form automatically applies to financial aid, tuition, or every other university office.
Contact the department responsible for the records.
Explain that you cannot access CIS and ask which release procedure applies.
FERPA Consent and Directory Information Are Not the Same
FERPA distinguishes between protected educational records and information the university classifies as directory information.
The University of Utah identifies several categories of directory information.
Examples include a student’s name, enrollment status, field of study, class standing, dates of attendance, and degrees received.
The university also has policies concerning how directory information is disclosed.
Students may request restrictions on the release of directory information.
This is a separate privacy consideration from authorizing a particular person to receive protected records.
For example, a student might authorize a parent to discuss financial aid while also wanting certain directory information kept confidential.
Those are different choices.
The university’s Registrar provides information about directory privacy and the relevant restriction process.
Students concerned about public availability of their information should review those options independently of the FERPA PIN.
Can a FERPA PIN Be Used to Change a Student’s Registration?
A FERPA authorization isn’t the same as a general power of attorney.
The University of Utah’s FERPA guidance distinguishes permission to release information from authority to act on the student’s behalf.
That distinction is important for registration and other academic decisions.
An authorized parent may be permitted to receive certain information, but that doesn’t automatically mean the parent can enroll the student in classes, withdraw them from courses, or make other account changes.
The university’s instructions also explain that students may need their FERPA PIN when requesting registration changes by telephone.
That requirement is part of identity verification.
It shouldn’t be interpreted as permission for any PIN holder to control the student’s academic account.
When an action involves changing a record rather than discussing it, verify the department’s specific authorization requirements.
Common FERPA Authorization Problems
Several situations can prevent an otherwise routine conversation with university staff.
The Person Isn’t Listed on the Form
A family member may know the student’s uNID and PIN but still lack a valid designation.
The university requires the individual to be correctly identified and authorized.
The student should review the consent form.
The Wrong Department Was Selected
A student may have authorized financial aid discussions but not academic advising.
The relevant office may therefore be unable to release the requested information.
Review the department selections.
The PIN Is Incorrect
The person requesting information may have an outdated or incorrectly entered PIN.
The student can review the FERPA consent process and update the PIN if necessary.
The Person Assumes the PIN Is a Login Credential
The FERPA PIN doesn’t provide ordinary CIS account access.
It is used for verification under the university’s release process.
The Student No Longer Has CIS Access
Former students may need to use a department-specific alternative form.
Contact the office responsible for the records.
The Request Goes Beyond the Authorization
A consent to release information doesn’t automatically authorize someone to change academic records or make decisions for the student.
Ask the department about the appropriate procedure.
Is It Safe to Share a FERPA PIN?
The PIN is intended to be shared with the people the student has authorized.
However, that doesn’t mean it should be distributed widely.
A FERPA PIN is used to verify access to protected information.
Anyone receiving it should understand its purpose and handle it responsibly.
Students should avoid posting the PIN in public messages or sharing it with unrelated individuals.
If a PIN has been disclosed to someone who shouldn’t have it, review the consent settings and update the verification information.
Also remember that the student’s uNID and other identifying information may be used during verification.
The safest approach is to provide the necessary details only to designated individuals.
How Long Does FERPA Authorization Last?
Students shouldn’t assume that every authorization has a universal expiration period.
The applicable consent form and university procedures determine how the authorization is maintained.
The University of Utah confirms that students can update their PIN and authorized-person list.
If you need to know whether an existing authorization remains active, review the current form