--- title: "34 CFR 99.33 FERPA: What limitations apply to the redisclosure of information?" canonical: "https://dposchool.com/ferpa/section/99.33" source: "https://www.ecfr.gov/current/title-34/section-99.33" source_note: "Source: United States Code, title 20, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 34, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR." text_as_of: "2026-10-29" language: "en" publisher: "DPO School" --- 34 CFR 99.33 FERPA · Part 99: FAMILY EDUCATIONAL RIGHTS AND PRIVACY · Subpart D: May an Educational Agency or Institution Disclose Personally Identifiable Information From Education Records? # 34 CFR 99.33 FERPA: What limitations apply to the redisclosure of information? eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. ## Official text **(a)(1)** An educational agency or institution may disclose personally identifiable information from an education record only on the condition that the party to whom the information is disclosed will not disclose the information to any other party without the prior consent of the parent or eligible student. #### 34 CFR 99.33(2) **(2)** The officers, employees, and agents of a party that receives information under paragraph (a)(1) of this section may use the information, but only for the purposes for which the disclosure was made. **(b)(1)** Paragraph (a) of this section does not prevent an educational agency or institution from disclosing personally identifiable information with the understanding that the party receiving the information may make further disclosures of the information on behalf of the educational agency or institution if— **(i)** The disclosures meet the requirements of § 99.31; and **(ii)(A)** The educational agency or institution has complied with the requirements of § 99.32(b); or **(B)** A State or local educational authority or Federal official or agency listed in § 99.31(a)(3) has complied with the requirements of § 99.32(b)(2). #### 34 CFR 99.33(2) **(2)** A party that receives a court order or lawfully issued subpoena and rediscloses personally identifiable information from education records on behalf of an educational agency or institution in response to that order or subpoena under § 99.31(a)(9) must provide the notification required under § 99.31(a)(9)(ii). ### 34 CFR 99.33(c) **(c)** Paragraph (a) of this section does not apply to disclosures under §§ 99.31(a)(8), (9), (11), (12), (14), (15), and (16), and to information that postsecondary institutions are required to disclose under the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act, 20 U.S.C. 1092(f) (Clery Act), to the accuser and accused regarding the outcome of any campus disciplinary proceeding brought alleging a sexual offense. ### 34 CFR 99.33(d) **(d)** An educational agency or institution must inform a party to whom disclosure is made of the requirements of paragraph (a) of this section except for disclosures made under §§ 99.31(a)(8), (9), (11), (12), (14), (15), and (16), and to information that postsecondary institutions are required to disclose under the Clery Act to the accuser and accused regarding the outcome of any campus disciplinary proceeding brought alleging a sexual offense. (Authority: 20 U.S.C. 1232g(b)(4)(B)) ## Source Source: Electronic Code of Federal Regulations (eCFR), title 34, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. Source credit: \[53 FR 11943, Apr. 11, 1988, as amended at 61 FR 59297, Nov. 21, 1996; 65 FR 41853, July 6, 2000; 73 FR 74853, Dec. 9, 2008; 76 FR 75642, Dec. 2, 2011\] [34 CFR 99.33 on eCFR](https://www.ecfr.gov/current/title-34/section-99.33) eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. This is reference material, not legal advice. ## Navigation [FERPA Navigator](https://dposchool.com/ferpa) / 34 CFR 99.33 Previous: [34 CFR 99.32 FERPA: What recordkeeping requirements exist concerning requests and disclosures?](https://dposchool.com/ferpa/section/99.32) Next: [34 CFR 99.34 FERPA: What conditions apply to disclosure of information to other educational agencies or institutions?](https://dposchool.com/ferpa/section/99.34) ## For AI agents - Machine-readable index: https://dposchool.com/ferpa/llms.txt - JSON API: https://dposchool.com/ferpa/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents