When Privacy Law Becomes Disclosure Mandate
The federal government has determined that four Kansas school districts violated student privacy law by keeping student information too private. On Friday, the Department of Education announced that Kansas City, Kansas Public Schools, Olathe Public Schools, Shawnee Mission School District, and Topeka Public Schools broke the Family Educational Rights and Privacy Act, a 1974 statute designed to prevent schools from sharing student records without parental consent, by maintaining policies that could prevent parents from learning whether their children used different pronouns or names at school, according to the Department of Education's announcement.
The enforcement action reveals how civil rights statutes written fifty years ago are being reverse-engineered into tools their authors never envisioned. FERPA was passed to give parents access to grades, test scores, and disciplinary records while preventing schools from releasing those records to third parties. Now it's being interpreted to require schools to disclose what the Student Privacy Policy Office calls "gender support plans" and related documentation.
The investigation began in August 2025 when the Defense of Freedom Institute filed a complaint, according to the Department of Education. Eight months later, two separate federal offices, the Student Privacy Policy Office and the Office for Civil Rights, issued findings that could force immediate policy changes across the four districts or trigger federal funding cuts.
The Enforcement Chain
The Student Privacy Policy Office found that all four districts maintained policies "likely to prevent schools from notifying parents whether their children were using different pronouns, going by different names, or having different names printed on diplomas," according to the office's findings. Those policies, the office concluded, violated parents' rights under FERPA to access school records about their children.
The Office for Civil Rights made separate findings under Title IX of the Education Amendments of 1972, according to the Department of Education announcement. Kansas City, Kansas Public Schools and Topeka Public Schools had policies allowing students to use bathrooms, locker rooms, and changing rooms based on gender identity rather than sex. The same two districts had policies allowing students to participate in single-sex athletics based on gender identity. Shawnee Mission School District has sports participation policies that "raise significant compliance concerns," the office found.
Three districts, Olathe, Shawnee Mission, and Topeka, admitted to OCR investigators that students have been allowed to use bathrooms and locker rooms based on gender identity, according to the Office for Civil Rights findings. Kansas City, Kansas Public Schools took a different approach: the district denied OCR access to information during the investigation, itself a violation of federal law.
The proposed Resolution Agreements issued Friday specify what the districts must do to come into compliance, according to the Department of Education. Schools can no longer allow students to participate in athletics based on gender identity; participation must be based on sex. Bathroom, locker room, changing room, and overnight accommodation use must be based on sex rather than gender identity. School personnel must be informed that gender support plans and related documents "will be made readily available and accessible to parents and guardians."
Districts that don't sign the agreements face administrative or judicial proceedings that could result in federal funding cuts, according to the Department of Education.
One District Pushes Back
Olathe Public Schools issued a response Friday stating the district was already in compliance with federal law when the Department of Education sent its initial letter in 2025, according to the district's statement. The district said the investigators' claims and findings "are not accurate" and that the investigation process "was not collaborative and lacked meaningful investigation."
The district stated it has met with investigators for months over the claims. Olathe said it remains "bound by law to provide free and appropriate public education to all students" and adheres to state and federal laws as well as Kansas High School Athletic Association guidelines for athletic programs, according to the district's statement.
The contradiction is stark. Three districts admitted to the practices OCR investigated. One district denied investigators access to information. One district says it was already compliant and the findings are false. The federal government says all four violated the law.
Assistant Secretary for Civil Rights Kimberly Richey framed the violations as a failure of leadership, according to the Department of Education announcement. The policies, she said, "violate federal law and are contrary to sound judgment expected from educational leaders."
The Statutory Twist
Title IX was passed in 1972 with language that reads: "No person in the United States shall, on the basis of sex, be excluded from participation in" educational programs receiving federal funding. The statute opened athletics, science programs, and academic opportunities to girls who had been systematically excluded.
Now the same statute is being used to determine which students can participate in girls' athletics, not whether girls can play sports, but which girls qualify. The interpretive shift turns on a single word: whether "sex" in the 1972 statute means sex assigned at birth or includes gender identity. Different presidential administrations have answered that question differently. The current enforcement action answers it definitively for these four districts.
FERPA's reversal is even more complete. The statute was designed to protect student privacy from external intrusion, preventing schools from sharing records with colleges, employers, or government agencies without consent. The Buckley Amendment, as it was known when passed, gave parents the right to see what schools were recording about their children and challenge inaccurate information.
The current interpretation flips the privacy protection inward. Schools that created policies to protect some students' privacy from their own parents are now told those policies violate the parents' right to access records. The law meant to prevent disclosure now mandates it.
What the Pattern Reveals
The four districts share geography, all serve communities in the Kansas City metropolitan area, but the investigation's scope suggests the enforcement mechanism could apply anywhere. Any district with policies that allow students to use different pronouns or names without automatic parental notification could face similar findings. Any district with athletics or facility-use policies based on gender identity rather than sex could be found in violation of Title IX as currently interpreted.
The Defense of Freedom Institute's complaint triggered an eight-month federal investigation that produced legally binding findings from two separate offices, according to the Department of Education timeline. The complaint-to-enforcement pipeline works: one advocacy group's filing can reshape policies across multiple school districts serving tens of thousands of students.
How Enforcement Actually Works
The Resolution Agreement process gives districts a narrow window to respond. According to the Department of Education, districts must either sign the agreements, which require immediate policy changes, or face administrative proceedings that can take months or years to resolve. During that time, the department can initiate funding reviews that freeze grant disbursements while continuing to require districts to meet federal compliance standards in other areas.
The four Kansas districts collectively enroll approximately 85,000 students, according to state education data. Kansas City, Kansas Public Schools serves roughly 22,000 students. Olathe Public Schools enrolls about 28,000. Shawnee Mission School District has approximately 27,000 students. Topeka Public Schools serves around 13,000. Each district receives millions in federal funding annually for programs including Title I services for low-income students, special education under IDEA, and nutrition assistance, funding streams that flow through separate channels but all require certification of civil rights compliance.
For students currently using different names or pronouns at school without parental knowledge, the policy changes would be immediate upon district signature of the Resolution Agreement. School staff would be required to update parents about existing gender support plans and could no longer maintain such plans confidentially. Students participating in athletics or using facilities based on gender identity would need to change those practices before the start of the next school term, according to the proposed agreements.
The Vulnerability
The enforcement action demonstrates how statutes written to protect vulnerable populations can be reinterpreted when political priorities shift. FERPA and Title IX were landmark civil rights achievements that expanded privacy protections and educational access. Both laws remain on the books with their original language intact. What changed is not the text but the interpretation, and interpretation is determined by whoever controls the enforcement offices.
That institutional vulnerability extends beyond education policy. Any civil rights statute is only as protective as its current enforcers decide it should be. The Americans with Disabilities Act, the Voting Rights Act, the Fair Housing Act, all depend on federal agencies to investigate complaints, issue findings, and enforce compliance. All are subject to reinterpretation when administrations change.
The four Kansas districts now face a choice with no good options. Sign agreements that require immediate policy changes affecting students currently enrolled, or fight findings that come with the full weight of federal enforcement behind them. For Olathe, which insists it was already compliant, signing the agreement means admitting to violations the district says never occurred. For the other three districts, signing means ending practices they believed were legally sound and educationally appropriate.
The students whose pronouns or names were kept private from their parents will have that privacy removed. The parents who didn't know will be told. And the fifty-year-old laws meant to protect privacy and expand access will have been used to do the opposite.