FERPA's protection of personally identifiable information in a student's education records ends at the time of a student's death.
As a courtesy to the families of recently deceased students who were enrolled at the time of death, the University generally will not release information from their education records for one year without the consent of the deceased student's next of kin.
Unless it has information to the contrary, 75 years after the date the records were first created, the University will presume that the student is deceased. Thereafter the student's education records will be open.