"Is Jordan cleared to practice today?" That question comes in from a coach and the answer should take two seconds. But answering it correctly — in a way that gives the coach what they need without sharing records they shouldn't have access to — turns out to be more nuanced than most athletic departments realize. FERPA has specific rules about who can access student records, and coaches are not automatically entitled to see everything in an athlete's file.
Getting this wrong creates real exposure. A coach who receives more information than FERPA permits — even unintentionally — represents a disclosure violation. And a coach who doesn't have access to the information they need may make uninformed decisions about athlete participation. The goal is a clean line: coaches get what they need, and nothing they shouldn't.
How FERPA classifies coach access
Under FERPA, student education records can be shared with school officials who have a "legitimate educational interest" in the records. Coaches at a school generally qualify as school officials — they are typically employees of the school or district, acting in an official capacity, subject to the school's direct control. Their legitimate educational interest covers the information they need to do their job: ensuring that athletes in their program are authorized to participate.
The critical phrase is "information they need to do their job." A football coach's legitimate educational interest is in knowing whether each athlete on their roster is cleared to practice and compete. It is not an unlimited right to review any record in an athlete's educational file. The scope of access should be defined by the role — not assumed to be broad because the person is an employee.
Volunteer coaches occupy a more complicated position. A volunteer coach who is not a school employee and not under the school's direct control may not qualify as a "school official" under FERPA without formal designation. If your athletic program uses volunteer assistants, check with your district's legal counsel about how those roles are documented and what FERPA access they carry.
What coaches should be able to see
Based on the legitimate educational interest standard, coaches generally have appropriate access to:
- Clearance status. Whether each athlete on their roster is currently cleared to participate — yes or no, possibly with a reason category if the athletic director determines that's necessary for safe decision-making.
- Participation restrictions. If a physician has cleared an athlete with restrictions — "cleared for non-contact activity only" or "cleared with limitation on overhead activities" — the coach needs to know the restriction in order to manage practice safely. The diagnosis that created the restriction is generally not needed, just the operational restriction itself.
- Emergency contact information for their athletes. In the event of an on-field emergency, coaches need to be able to reach a parent or guardian. Access to emergency contact details for athletes in their sport is a legitimate operational need.
What coaches should not see
The following records are generally beyond the scope of a coach's legitimate educational interest and should not be shared without explicit consent:
- Physician notes and diagnoses. A clearance form signed by a physician may include notes about a student's medical history, diagnoses, or treatment. That underlying medical information belongs in the student's protected record, not in a coach portal.
- Insurance and financial information. Emergency contact forms often include insurance policy information. Coaches have no legitimate educational interest in a family's insurance carrier or policy number.
- Records for athletes in other sports. A soccer coach's access should be scoped to soccer athletes. Sharing a full school roster or a combined clearance list across all sports exposes records to staff who have no legitimate interest in athletes outside their program.
- Historical medical records from prior seasons. A coach's legitimate interest is in current clearance status, not in a student's multi-year athletic medical history. Prior-year records should be accessible to the athletic director for compliance purposes but are not needed in the coach-facing view.
The operational fix: role-scoped coach portals
The right way to manage this isn't a policy memo — it's access controls built into the platform. A coach portal that is architected correctly shows each coach only the athletes in their sport, only the current clearance status and any participation restrictions, and only the emergency contact information for their athletes. Underlying records — physician notes, insurance details, full health history — are visible only to the athletic director and authorized administrators.
This structure means coaches can get the answer to "Is Jordan cleared?" in seconds, from their phone on the sideline, without the athletic director having to field the call. And it means the athletic director can demonstrate, in an audit, exactly what each coach had access to and when — because the access is logged, scoped, and defensible.
FormVault's coach portal is built on this model. Coaches see their roster's clearance status, participation restrictions, and emergency contacts — and nothing else. Every access is logged with a timestamp and user identity. If you're currently managing coach access through shared spreadsheets, email distributions, or general-purpose tools that don't scope by role, that workflow creates FERPA exposure every time a form is forwarded or a spreadsheet is opened on an unmanaged device.