by Claude Opus 5.5
The university says privacy law stops it saying who was punished and how. Should privacy for the accused outweigh the public’s wish to know?
When the case behind these seminars became national news, many people wanted to know exactly what Cornell had done. Which students were found responsible? Which were expelled, which suspended, and which received lighter sanctions? Cornell has said that a US privacy law called FERPA (the Family Educational Rights and Privacy Act) limits what it can share about individual students’ disciplinary records. For some people, that is a reasonable protection. For others, it looks like the university hiding behind the law to avoid criticism. This question asks us to weigh two things that both matter: the privacy of individuals and the public’s wish to know.
What the law says
FERPA protects the privacy of student education records, including disciplinary records. Generally, a university cannot release those records without the student’s consent. There are exceptions. For example, a university may tell a complainant the outcome of a disciplinary process, and it may in some circumstances disclose the final result of a process where a student was found responsible for a violent crime or a sexual offence. But “may” is not “must”: the law often allows disclosure without requiring it. This means part of what Cornell is doing may be a choice, not just a legal obligation. That is worth keeping in mind when deciding whether its silence is fair.
The case for privacy
There are good reasons to protect privacy in disciplinary matters. University processes are not criminal trials. They use a lower standard of proof, and they are designed to decide whether a student broke the university’s rules, not whether they committed a crime. If outcomes were published, people would treat them as if they were criminal verdicts, and the consequences for the person named could be far greater than the sanction itself: harassment, lost jobs, damage that lasts for life.
Privacy also protects people who are not accused at all. Detailed disclosures could reveal information about the person who reported the assault, or about witnesses. And in this case there is a stark warning about what can happen when information spreads publicly: a man who had nothing to do with the case was wrongly identified online, and his family received threats. Once a name is public, no one can control how it is used.
There is also an argument from fairness to the process. If students know that disciplinary outcomes will be made public, they may be less willing to take part honestly. Respondents may fight harder and admit less. Witnesses may be reluctant to come forward.
The case for knowing
On the other side, people have real reasons to want information.
Safety: other students may want to know whether someone found responsible for sexual misconduct is still on campus. Students living or studying near that person might reasonably feel they have a right to know.
Accountability: if the university is never required to explain its decisions, how can anyone judge whether it is doing its job well? In this case, the public’s main concern seems to be that the sanctions were too light. Without information, it is impossible to check.
Trust: when an institution says “we can’t tell you”, people often assume the worst. Silence can damage trust in the institution and make survivors less willing to report.
Two different questions
It helps to separate two things the public might want to know. The first is who: the names of the students and what happened to each of them. The second is how: whether the university’s process was fair and whether its sanctions, taken together, were appropriate.
The case for keeping names private is strong, especially since no one has been convicted of a crime. But the case for keeping the overall picture secret is much weaker. A university could, without naming anyone, publish how many students were found responsible, the range of sanctions imposed, how long the process took and how it reached its decisions. That kind of information lets the public judge the institution without exposing individuals to harm. Indeed, Cornell has published some general information, which suggests it recognises this.
Does privacy outweigh the wish to know?
A reasonable answer is: it depends what you want to know. Privacy should usually outweigh the public’s wish to know who was punished and how, because the harm of exposure is severe, often permanent and may fall on innocent people. But privacy should not be used as a reason to keep the public from understanding whether the institution acted well. Where an institution has a choice about disclosure, it should use that choice to be as open as it can about its process, while protecting individuals.
It is also worth noticing that the public’s “wish to know” is not always the same as the public interest. Curiosity, anger and the desire to see someone punished are understandable, but they are not reasons strong enough on their own to override someone’s privacy.
Questions for discussion
If you were a student at Cornell, what information would you want, and why? Should the person who reported the assault be told everything? Would your view change if one of the students was later convicted in court? And is there a difference between information you want and information you have a right to?