Written and maintained by CASRAI Editorial Board
Last updated
The Protection of Pupil Rights Amendment (PPRA) is a U.S. federal law, codified at 20 U.S.C. 1232h, that controls how surveys, analyses and evaluations that touch eight sensitive subject areas can be given to students in programs funded by the U.S. Department of Education. For a researcher, the practical consequence is one rule worth memorizing: a survey in a covered school program that reveals information in any of the eight areas needs the student’s prior consent or, for an unemancipated minor, the parent’s prior written consent. This page, written for researchers and research administrators rather than as a parent handout, draws on the Department’s PPRA topic page and the statute text, both checked on 2026-10-29.
What PPRA is and who runs it
As described on the Department of Education’s student privacy site on 2026-10-29, PPRA governs how surveys, analyses and evaluations are administered to students. It also covers marketing surveys, other areas of student privacy, parental access to information, and certain physical examinations of minors. The cited authorities are 20 U.S.C. 1232h and 34 CFR Part 98.
The Department of Education’s Student Privacy Policy Office (SPPO) publishes the guidance and model notices, and the statute directs the Secretary of Education to enforce the section and to establish or designate an office and review board within the Department “to investigate, process, review, and adjudicate violations” of the rights it creates (20 U.S.C. 1232h(e) and (f)). The Department’s page links to a general “File a Complaint” page for complaints. Its general PPRA guidance (November 2020) is marked as currently being reviewed and updated, and the page points readers to an August 26, 2026 Dear Colleague letter, so check the Department’s page for the current version before relying on any guidance document.
Eligibility: who PPRA covers
PPRA applies to the programs and activities of State educational agencies (SEAs), local educational agencies (LEAs) and other recipients of funds under any program funded by the U.S. Department of Education. The rights belong to parents. They transfer to the student once the student is 18 or is an emancipated minor under State law.
For a research team this means the question is not “is this a school?” but “is the activity part of a program that receives Department of Education funds?” That determination is made by the school district or agency, so ask it directly rather than assuming. PPRA is also separate from the Family Educational Rights and Privacy Act; see the related-laws table below.
What PPRA requires
The eight protected areas
Under 20 U.S.C. 1232h(b), a survey, analysis or evaluation that reveals information concerning any of these areas triggers the consent rule (wording from the Department’s page):
- political affiliations or beliefs of the student or the student’s parent;
- mental or psychological problems of the student or the student’s family;
- sex behavior or attitudes;
- illegal, anti-social, self-incriminating, or demeaning behavior;
- critical appraisals of other individuals with whom respondents have close family relationships;
- legally recognized privileged or analogous relationships, such as those of lawyers, physicians, and ministers;
- religious practices, affiliations, or beliefs of the student or student’s parent; and
- income (other than that required by law to determine eligibility for participation in a program or for receiving financial assistance under such program).
Consent, inspection and local policy
Subsection (b) says no student is required, as part of an applicable program, to submit to a survey, analysis or evaluation revealing these areas without the prior consent of the student or, for an unemancipated minor, the prior written consent of the parent. Subsection (a) makes instructional materials, including teacher’s manuals, films, tapes and other supplementary material, available for inspection by parents or guardians. Subsection (c)(1) requires a local educational agency receiving applicable-program funds to develop and adopt policies, in consultation with parents, covering parental inspection of a third-party survey before it is administered or distributed, instructional material, physical exams and screenings, and the collection and use of personal information for marketing or selling. Under (c)(2), the agency must give notice of those policies, notify parents at least annually at the beginning of the school year (and after substantive policy changes), and tell them the scheduled or approximate dates of covered activities.
Statute map for quick citation
| Subsection | What it does |
|---|---|
| 1232h(a) | Instructional materials available for parental inspection |
| 1232h(b) | No required survey, analysis or evaluation revealing the eight areas without prior consent (parent’s prior written consent for an unemancipated minor) |
| 1232h(c)(1) | Local educational agency must adopt policies, in consultation with parents, on inspection, physical exams and marketing uses of personal information |
| 1232h(c)(2) | Notice of policies, annual notice at the start of the school year, and notice of scheduled dates of covered activities |
| 1232h(c)(4) | Exceptions, including certain educational products and services excluded from the marketing rule; State parental-notification laws preserved |
| 1232h(e) | Secretary enforces; funding may be terminated only if compliance cannot be secured by voluntary means |
| 1232h(f) | Office and review board within the Department to handle violations |
Compliance steps for a school survey
- Screen the instrument against the eight areas. Read every item, not only the title. A health or climate survey can still reveal mental or psychological problems, illegal behavior or family income.
- Confirm with the district whether the program is Department of Education funded and which district policy governs third-party surveys.
- Choose the consent route. If any item reveals a protected area, plan for the student’s consent (age 18 or emancipated) or the parent’s prior written consent, not a notice alone.
- Make the survey available for parental inspection before it is administered or distributed.
- Coordinate with the district’s annual notice and its schedule of covered activities.
- Run PPRA alongside, not instead of, ethics review. Consent under PPRA is a funding-program rule; the IRB review and informed consent requirements for human subjects research are separate gates, and for minors an assent process may also apply.
Typical timeline phases
These are phases, not deadlines; the statute sets no filing deadline for researchers, and districts set their own calendars.
- Instrument design and screening against the eight areas.
- District and ethics review, including any district research-approval process.
- Parent notice and inspection period, ahead of administration.
- Consent collection.
- Administration.
Institutions can set their own lead times. For example, Utah State University’s IRB guidance, applying Utah law, says “Letters of Information or other passive consent processes will not be sufficient under the PPRA” and that the IRB typically requires two weeks between the notice and the distribution of the consent document. That is a state and institutional rule, not a federal requirement, so check the rules where the study takes place.
Common mistakes
- Treating a notice as consent. Subsection (b) speaks of prior consent; a letter that only informs families does not satisfy it for a protected-area survey.
- Screening only the survey title. The test is whether information in one of the eight areas is revealed, which depends on the questions.
- Assuming PPRA and FERPA are the same thing. They have different statutes and different triggers.
- Applying federal minimums where State law is stricter. The statute preserves State parental-notification laws, and some states require more.
- Relying on an old guidance document. The Department’s general PPRA guidance is marked as under review.
Related programs and laws
| Law or process | What it governs | Relation to PPRA |
|---|---|---|
| FERPA (20 U.S.C. 1232g; 34 CFR Part 99) | Disclosure of education records by institutions receiving Department of Education funds | Governs existing records; PPRA governs surveys, analyses and evaluations given to students. Research with student data can need both. |
| Common Rule (45 CFR Part 46); see 45 CFR 46 subparts explained | Ethics review of human subjects research | Independent regime. IRB approval does not replace PPRA consent, and PPRA consent does not replace IRB review. |
| State parental-notification laws | Vary by state | Preserved by the statute; can be stricter than the federal rule. |
For wider context on the field, see what education research is.
FAQ
What does PPRA stand for?
The Protection of Pupil Rights Amendment, 20 U.S.C. 1232h, a U.S. federal student-privacy law administered through the Department of Education.
Does PPRA apply to every survey of students?
No. It applies to programs and activities of State and local educational agencies and other recipients of funds under any Department of Education program, and its consent rule concerns surveys, analyses or evaluations revealing the eight listed areas.
Who gives consent?
The parent, in writing and in advance, for an unemancipated minor. The student gives consent at age 18 or if an emancipated minor under State law.
How is PPRA different from FERPA?
FERPA covers education records; PPRA covers surveys, analyses and evaluations administered to students, plus marketing uses of personal information and certain physical exams.
Where do I report a problem?
The Department of Education’s student privacy site links to a “File a Complaint” page run by its Student Privacy Policy Office.
Sources
- U.S. Department of Education, Student Privacy Policy Office, Protection of Pupil Rights Amendment (PPRA), checked 2026-10-29.
- 20 U.S.C. 1232h, statute text at Cornell Legal Information Institute, checked 2026-10-29.
- Utah State University Research Office, PPRA guidance (state and institutional example), checked 2026-10-29.
