The privacy of student educational records is protected by the Family Educational Rights and Privacy Act (FERPA). The Act prohibits posting student grades by name, social security number, or student identification without the specific written consent of each student. Faculty members may post grades by code word or random number known only to the faculty member and student provided that the list is not in alphabetical order by student name. The practice of leaving graded papers in unsecured locations for students to pick up later is considered a FERPA violation. All or any part of the Social Security Number or University ID Number must never be used to publicly post grades.)
See also the Indiana University Policy on Student Records on the importance of protecting the privacy of student information, including personal data and student grades.