How to Protect Your Privacy From School Directory Listings

Every fall, schools across the country compile directories containing students' and parents' personal information — names, home addresses, phone numbers, email addresses, and more. While these directories serve legitimate purposes like connecting families, they also create a significant privacy risk. The good news: federal law gives you the right to opt out. Here is exactly how to protect your family.

What School Directory Information Includes

Under the Family Educational Rights and Privacy Act (FERPA), schools can designate certain student data as "directory information" and share it without your explicit consent. This typically includes:

• Student's full name
• Home address
• Phone number(s)
• Email address
• Date and place of birth
• Grade level and enrollment status
• Photograph
• Dates of attendance
• Awards and honors
• Participation in officially recognized activities and sports

Parent contact information — including names, phone numbers, and email addresses — is frequently included in PTA directories or shared through school communication platforms. Taken together, this data paints a detailed picture of your family that can be exploited by marketers, scammers, and data brokers.

Your Rights Under FERPA

FERPA is a federal law that protects the privacy of student education records. One of its most important provisions gives parents (and students aged 18 or older) the right to prevent schools from disclosing directory information. Here is what the law requires:

• Annual notification: Schools must inform parents every year about what they classify as directory information and how it may be shared.
• Right to opt out: You have the legal right to tell the school not to release your child's directory information to anyone — including other parents, third-party organizations, and military recruiters.
• Opt-out window: Schools must give you a reasonable period to submit your opt-out request, typically within the first few weeks of the school year.

How to Opt Out: Step by Step

Opting out of school directory information sharing is straightforward, but you need to act within the deadline. Follow these steps at the beginning of each school year:

1. Request the FERPA opt-out form. Contact your school's front office, registrar, or enrollment coordinator. Many schools include the opt-out form in the back-to-school paperwork packet. If you cannot find it, ask specifically for the "FERPA directory information opt-out form."
2. Submit written notice before the deadline. Most schools set a deadline within the first two to four weeks of the school year. Submit your opt-out in writing — do not rely on a verbal request. Keep a copy of everything you submit.
3. Be specific about what you are opting out of. Some schools allow you to opt out selectively. You may choose to opt out of the full school directory, third-party sharing only, or military recruiter access specifically. If the form does not offer granular choices, write a letter specifying exactly what you want restricted.
4. Confirm receipt. Follow up with the school to verify your opt-out was received and processed. Ask for written confirmation if possible.
5. Repeat every year. FERPA opt-outs do not carry over automatically at many schools. Submit a new opt-out request each school year and whenever your child transfers to a new school.

PTA and PTO Directories Are Separate

Many parents assume that opting out of the school's official directory also covers the PTA or PTO directory. It does not. Parent-teacher organizations typically operate independently from the school administration and maintain their own contact lists.

If your PTA or PTO publishes a family directory — whether printed or digital — you need to contact the organization directly to request removal. Review the PTA membership form carefully before signing, as many include a consent checkbox for directory inclusion that is easy to overlook.

Third-Party Education Platforms

Modern schools rely on a growing number of third-party apps and platforms to manage communication and classroom activities. Popular tools like ParentSquare, ClassDojo, Bloomz, and Remind often collect parent contact information independently of the school's official records.

These platforms may share or expose your data in ways you do not expect:

• Visible profiles: Some platforms display your name, email, or phone number to other parents by default.
• Data sharing with partners: Review each platform's privacy policy. Some share aggregated or identifiable data with advertising or analytics partners.
• Push notifications and marketing: You may receive promotional messages unless you adjust your notification and marketing preferences.

For each platform your school uses, log in and review the privacy settings. Disable profile visibility where possible, opt out of data sharing, and limit the personal information stored in your account to only what is required.

Military Recruiter Access for High School Students

If your child is in high school, there is an additional privacy concern most parents overlook. Under both FERPA and the No Child Left Behind Act (NCLB), high schools that receive federal funding are required to provide military recruiters with students' names, addresses, and phone numbers — unless a parent or student opts out.

This is a separate opt-out from the general directory information opt-out. To prevent military recruiter access:

• Submit a written request specifically stating you do not want your child's information shared with military recruiters.
• Address the request to both the school principal and the registrar.
• Some schools combine this with the FERPA opt-out form, but many do not — ask explicitly.

How School Directory Data Feeds Data Brokers

School directory information does not stay within the school community. Once your name, address, phone number, and family details are shared — whether through an official directory, a PTA list, or a third-party app — that data can make its way to people-search sites and data brokers.

Here is how it happens:

• Printed directories can be photographed, scanned, or manually entered into databases.
• Digital directories shared via email or apps can be forwarded, screenshotted, or scraped.
• Third-party platforms may sell or share data with marketing companies and aggregators who feed into broker networks.
• Public records linkage: Data brokers cross-reference directory information with property records, voter registration files, and social media profiles to build comprehensive family profiles.

Once your information reaches data broker sites like Spokeo, WhitePages, BeenVerified, or TruePeopleSearch, it becomes publicly searchable by anyone — including stalkers, scammers, and identity thieves.

Social Media Risks From School Events

Even if you opt out of every directory, your family's information can still be exposed through social media. School events, sports games, performances, and classroom activities generate a constant stream of photos and videos that other parents share freely online.

To reduce this risk:

• Ask the school to enforce its photo and media policy, especially regarding students whose parents have opted out of directory information sharing.
• Communicate with other parents and request that they not post photos of your child on social media.
• Review class lists and group chats shared in parent Facebook groups or WhatsApp chats — these often include full names, phone numbers, and email addresses posted publicly or semi-publicly.

How PrivacyOn Protects Your Family

Opting out of school directories is an important first step, but it cannot undo information that has already been collected and sold. Data brokers may already have your family's names, home address, phone numbers, and email addresses in their databases — sourced from school directories, public records, and dozens of other channels.

PrivacyOn removes your family's personal information from 100+ data broker sites where school directory data and other personal records commonly appear. Our service includes:

• Comprehensive scanning to identify where your family's information is listed
• Automated opt-out submissions to data brokers on your behalf
• Continuous monitoring to catch re-listings and new exposures
• Family plans covering up to 5 household members — parents and children

While you handle the school-side opt-outs, PrivacyOn handles the far larger task of cleaning up the data broker ecosystem. Together, these steps give your family real, lasting privacy protection. Plans start at just $8.33/month.

Take Action Before the School Year Starts

School directory opt-outs have tight deadlines, and missing them means your family's information stays in circulation for an entire year. Mark your calendar for the first week of school and have your written opt-out requests ready to submit on day one. Review every form, every app, and every permission checkbox. Your family's privacy is worth the effort — and you have the legal right to protect it.