Student Records Checklist

Purpose and scope

This checklist outlines the core records and actions institutions should maintain for enrolled and former students, and the governance responsibilities that support trustworthy records management. It applies to institutional academic records, enrolment and progression data, assessment results, awards and transcripts, learner communications, and records required by law or sector practice.

Core student records to hold

• Student identity and contact details (name, date of birth, verified ID documents).
• Admission and enrolment records (application, acceptance, entry qualifications, admissions decisions).
• Academic records (module registrations, assessment submissions, marks, grades, assessment moderation notes).
• Attendance and engagement records where required for programme integrity or regulatory compliance.
• Award documentation (diplomas, certificates, transcripts, conferral dates) and certificate issuance logs.
• Records of adjustments, reasonable accommodations and academic integrity incidents.
• Complaints, appeals and disciplinary records with outcomes and corrective actions.

Retention, security and privacy

Establish a documented retention schedule consistent with local law and institutional policy. Protect records through access controls, encrypted backups, and secure disposal. Ensure processing of personal data has lawful basis and documented consent when required. Provide students with clear privacy notices and a mechanism to request access or correction of their records.

Accuracy, version control and archival practice

Maintain single-authoritative student records and log changes with date, author and reason. Use version control for certificates and transcripts; retain original issued versions and any authorised reprints. Archive records in durable formats and ensure they are discoverable for audit, verification or student requests.

Issuing transcripts and awards

1. Verify identity and completion of requirements before issuing any award.
2. Issue official transcripts on institutional letterhead or secure digital equivalents and retain a copy in the student file.
3. Record the method and date of issuance and the recipient.

Access, disclosure and third-party verification

Define who may access records internally (academic staff, QA, registry) and when external disclosure is permitted (with student consent, legal process, or statutory requirement). Use formal verification processes for third-party transcript requests and keep a disclosure log.

Operational controls and quality assurance

• Assign a senior records custodian (registry/registrar) and a deputy.
• Document policies: records management, retention schedule, data protection/privacy, certificate policy, corrections policy, and business-continuity plans.
• Train staff on recordkeeping procedures and data-protection obligations.
• Include records checks in internal audits and external quality reviews.

Response to requests, corrections and disputes

Provide a clear, timely process for students to request access, corrections or replacements. Record all requests and outcomes. Where disputes arise, follow your institutional appeals procedure and retain all related documentation.

Quick checklist (summary actions)

1. Adopt a written records-management policy and retention schedule aligned to local law.
2. Designate a records custodian and publish contact details in the student handbook.
3. Ensure secure storage, backups and encrypted transmission where appropriate.
4. Record issuance of all awards and keep official copies.
5. Publish student privacy notices and a clear access/correction process.
6. Train staff and include records in QA audits.