Federal Investigations and Information Requests
Responding to Investigations and Requests for Information
What types of legal requests does the University receive?
The University may receive a wide variety of formal process and investigative requests from federal government agencies and third parties. Some of these requests may include but are not limited to requests for information (RFI’s) relating to a federal investigation, subpoenas in civil or criminal proceedings, court orders, and search warrants. Some of these requests may seek records pertaining to students, employees, or internal operations of the University.
How does the University handle requests for disclosure of non-public records?
As a general matter, the University requires valid legal process before disclosing non-public records. Whether the request is a duly issued subpoena, court order, search warrant, or other form of legal process, the Office of the General Counsel (OGC) ensures that each request meets applicable legal requirements. If such requests do not meet legal requirements, the requests are declined or challenged.
How does the University respond to federal investigative requests?
Because Stanford receives funds from the federal government, it must respond to lawful requests from federal agencies. Whenever Stanford receives an inquiry, investigation, or new regulatory requirement from the federal government, OGC evaluates the legal basis and scope of the request(s), identifies the information relevant to the investigation and preserves the records containing that relevant information. If the government’s request is lawful, Stanford prepares a response that meets the scope of the request and protects private or confidential information to the extent possible under the law. The University does not disclose any non-public information without valid legal authority.
How does the University protect sensitive and/or personally identifiable information when disclosing records?
The University takes reasonable steps to protect confidential or protected information. The University may redact non-responsive or personally identifying information, withhold information subject to privilege or other legal protections, or produce records under confidentiality designations or protective orders. While OGC will comply with relevant laws to maintain privacy or confidentiality, such as FERPA, certain exceptions may apply with respect to government investigations.
Are there instances where the University may have to release personally identifying information?
Yes. Federal regulations require universities that receive federal funding to provide information necessary for civil rights compliance reviews, even when those records include personally identifiable information. The University takes such privacy concerns seriously and seeks to limit disclosures, but in certain circumstances, the agency may require it.
Can the University refuse to comply with the government’s requests?
Refusing to cooperate with federal investigations can trigger serious enforcement action by federal agencies including litigation, administrative penalties, or denial of federal funding, threatening the financial well-being of the University and jeopardizing its educational and research endeavors.
How does the University respond to lawfully issued subpoenas from third parties?
OGC checks for proper service and then identifies the correct University department that maintains the requested records. OGC works with that department to gather and analyze the relevant documents and then finalizes and produces those documents responsive to the subpoena, subject to attorney review and approval. OGC makes every effort to protect private and/or sensitive information under relevant state and federal laws.
How are subpoenas for student records handled?
Student education records are protected under the Family Educational Rights and Privacy Act (FERPA). Upon receipt of a subpoena seeking student records, OGC reviews the subpoena for legal validity and ensures its scope is appropriate; determines whether disclosure of student records is legally permitted under FERPA; provides notice to the student whose records were requested, where required or permitted, unless legally prohibited; and produces only those records necessary to comply with the subpoena.
How are subpoenas for employee records handled?
Requests for employee records are evaluated under applicable federal and California privacy and employment laws. OGC verifies the validity of the subpoena for employee records, assesses applicable privacy and confidentiality obligations, limits the disclosure of information required by the law, and provides notice to the employee where legally permissible and appropriate under the circumstances.
Will the University provide notice to those individuals whose records are being requested?
Where permitted by law, the University will provide notice to individuals whose records are sought and which are not de-identified or redacted. Notice practices depend on the nature of the legal request, the applicable statutory or regulatory requirements, and the presence of any nondisclosure obligation or legal prohibition on notice.
Where should legal process be directed?
All subpoenas, requests for information (RFI’s), and other legal requests or process must be directed to the Office of the General Counsel:
Office of the General Counsel, 450 Jane Stanford Way, Building 170, Stanford, CA 94305
Service on other University offices or personnel may not be effective and could result in delays.
Updated 5/7/2026