What Schools Can and Cannot Say During a Crisis

Every row varies by state, by whether juvenile-record confidentiality attaches, and by whether an agency has asked you to hold information during an active investigation. Treat this as the list of questions to put to your counsel, not as an answer. Nothing here is legal advice.

The three misconceptions that cause most of the damage

"FERPA means we cannot say anything." FERPA restricts disclosure of personally identifiable information from education records. It does not restrict describing an event. "A fight occurred in the cafeteria during second lunch; two students were taken to hospital and are expected to recover; the code of conduct is being applied" contains no education-record disclosure and answers most of what families need. Districts that go silent behind FERPA are usually protecting themselves from difficulty rather than protecting a student, and families can tell the difference.

FERPA also contains a health-or-safety emergency provision permitting disclosure to appropriate parties when there is an articulable and significant threat, and it is narrower and more time-bound than districts hope. It is a route for telling law enforcement or a hospital what they need to know. It is not a route for a public message naming a student.

"HIPAA stops us discussing a student's medical situation." HIPAA generally does not apply to school health records held by a school district; those are education records under FERPA. The practical outcome is similar — do not disclose — but citing the wrong statute to a reporter damages credibility, and it produces a second story about a district that does not know its own obligations.

"The police told us not to say anything." Sometimes true and sometimes a request that has grown in the retelling. Ask the agency PIO precisely which facts are held and until when, and write the answer down with a name and a time. "We are not able to share information about the investigation while it is active" is a legitimate and honest sentence. "Police told us to stay silent" as a reason for sending families nothing at all is almost never what was asked of you, and it will not hold up afterwards.

Twenty sentences, rewritten

Left column is what districts write. Right column is what survives counsel, a records request and a reporter.

• "A student was shot" → "One student was injured and has been taken to hospital. We will not share further details about any individual student."
• "The suspect is a 15-year-old male sophomore" → "Law enforcement has one person in custody. Questions about that individual go to [AGENCY PIO]."
• "The student who died had been struggling for a long time" → "We are heartbroken to share that a student in our community has died. Out of respect for the family we will not share details."
• "He took his own life after being bullied" → "A student has died. There is never a single cause, and we will not speculate. Support is available and here is how to reach it."
• "We have no reason to believe there is any ongoing danger" → "Police have told us there is no ongoing threat to the school. That is their assessment as of [TIME]."
• "This was an isolated incident" → drop it. It means nothing, and it ages badly if a second incident follows.
• "The student has been expelled" → "The code of conduct is being applied. We cannot discuss discipline involving an individual student."
• "The teacher has been placed on leave" → "A staff member is not currently at the school. We do not discuss personnel matters while they are under review." (Expect this one to become public regardless; check your state's employee-disclosure rules.)
• "We are cooperating fully with the investigation" → keep it, but add a fact: "and we have provided [SPECIFIC THING] to investigators."
• "Our thoughts and prayers are with the family" → keep only if followed by something concrete: counselling hours, a phone number, an action.
• "The door had been propped open by a student" → "The review will determine how the person entered. We have already changed [SPECIFIC MEASURE]." Naming a student, even indirectly, in a building of 400 identifies them.
• "No students were involved" → "The individual involved is not enrolled at our school." Precise, and it stops a rumour naming a child.
• "We followed all protocols" → "Staff followed the Secure protocol at [TIME]. The after-action review will examine everything we did."
• "There was never any danger to students" → only if true and confirmed. Otherwise: "Students were not in the area involved."
• "We cannot comment" → "Here is why I cannot answer that, and here is who can."
• "A student brought a gun to school" → "A weapon was found on campus this morning. It was recovered and no one was injured." See the weapon-on-campus letters.
• "Several students were treated for anxiety" → "Some students received support from our counselling team." Medical framing of a normal reaction is both a disclosure risk and unhelpful.
• "The family has asked for privacy" → use only if the family actually asked. Ask them, then quote them.
• "We will provide an update when we have one" → "Our next update will be by [SPECIFIC TIME], whether or not anything has changed."
• "This is a difficult time for our school family" → keep, but never as the opening line. Lead with facts and instructions; put feeling after them.

Public records, death, and the pre-send checklist

Your crisis messages are probably public records. In most states, a message sent by a public school district to families is a record of the district and is disclosable on request, and it will be requested after any serious incident. Two consequences follow. Write every message expecting to see it in a newspaper next to a timestamp — which is also the reason to keep a message log you can prove was not altered afterwards. And never put in a message something you would not want disclosed, including internal caveats in a draft that got sent by accident. Whether your specific messages are exempt, and whether any security-information exemption applies, is a question for your counsel and varies substantially by state.

Confirming a death. The practical gate is the family, not the statute. Speak to them, and ask three questions in plain words: may we tell the school community, what would you like us to say, and is there anything you specifically do not want said. Then do exactly that. Where a death is by suicide, safe messaging governs: do not describe the method, do not describe the location, do not offer a single-cause explanation, do not use language that makes the death sound romantic, heroic or like a solution, and always pair the news with where support can be found. Route the letter through the district's mental-health lead before it is sent — not for approval theatre, but because they will catch phrasing that a communications office will not. Guidance from AFSP, the Suicide Prevention Resource Center and NASP's postvention material governs; our postvention letter page follows it. Every such message carries counselling routing: on-site counsellors, who to call, and the 988 Suicide & Crisis Lifeline, available by call or text at any hour.

The pre-send checklist, one page, run before any crisis message leaves: Is every fact confirmed, and by whom by name? Is any individual identifiable, including by description in a small building? Have we stated a cause we do not know? Have we named a student, a staff member or a suspect? Has counsel seen it, if it touches an investigation, discipline or a death? Is there a specific time for the next update? Is counselling routing included? Would this sentence survive being read aloud in a board meeting in six months?

Questions people actually ask

Related