Student Records Retention for BPPE Schools

Last updated June 11, 2026

A California private postsecondary school must keep student records on two different clocks: the transcript of every student granted a degree or certificate is kept permanently (CEC 94900(b)), and the rest of the student file is kept for five years from the student’s date of completion or withdrawal (5 CCR 71930(b)(1)). The rest of the rules - what goes in the file, where it can live, and how fast you must produce it - hang off those two clocks.

The two retention clocks

The permanence mandate sits in the Education Code. CEC 94900(a) requires an institution to maintain the name, address, email address, and telephone number of each enrolled student. CEC 94900(b) then requires “complete and accurate permanent records” for each student granted a degree or certificate: the degree or certificate and the date it was granted, the courses and units on which it was based, and the grades earned in each course. That is the transcript, and it never expires.

The five year clock for everything else is in the regulations, not the statute. 5 CCR 71930(b)(1) provides that “in addition to permanently retaining a transcript as required by section 94900(b) of the Code, the institution shall maintain for a period of 5 years the pertinent student records described in Section 71920 from the student’s date of completion or withdrawal.” The trigger is completion or withdrawal, not enrollment, so a student who attends for three years generates a file you hold for roughly eight. And the section numbers are commonly crossed up: the five year period is not in CEC 94900, and transcript permanence is not in CEC 94900.5, which covers institutional records, discussed below.

Two adjacent clocks are easy to confuse with these. Federal financial aid records follow federal retention rules notwithstanding the five year rule (5 CCR 71930(b)(2)). And the documentation behind your Annual Report and School Performance Fact Sheet figures runs on its own parallel clock: it must be kept electronically for five years from the last time the data was used in an Annual Report or Fact Sheet (5 CCR 74112(m); CEC 94929.7).

What must be in every student file

5 CCR 71920(a) requires the institution to maintain a file “for each student who enrolls in the institution whether or not the student completes the educational service.” A withdrawn student’s file is just as mandatory as a graduate’s. 5 CCR 71920(b) then lists twelve categories the file must contain - all of them, not a sample:

• Records or transcripts of prior education or training relevant to admission or credit, including verification of high school completion or its equivalent (or ability to benefit), transfer credit records, admission or placement exam grades or findings, and prior experiential learning documents (5 CCR 71920(b)(1)).
• Voluntarily disclosed age, gender, and ethnicity information (5 CCR 71920(b)(2)).
• “Copies of all documents signed by the student, including contracts, instruments of indebtedness, and documents relating to financial aid” (5 CCR 71920(b)(3)).
• “Records of the dates of enrollment and, if applicable, withdrawal from the institution, leaves of absence, and graduation” (5 CCR 71920(b)(4)).
• A transcript meeting the content rules in the next section (5 CCR 71920(b)(5)).
• For independent study courses, the course outlines or learning contracts signed by the approving faculty and administrators (5 CCR 71920(b)(6)).
• For graduate students, the dissertation, thesis, or project (5 CCR 71920(b)(7)).
• Financial aid documents required by law or by a loan guarantee agency (5 CCR 71920(b)(8)).
• “A document showing the total amount of money received from or on behalf of the student and the date or dates on which the money was received” (5 CCR 71920(b)(9)).
• Refund documentation: the amount refunded for tuition and each itemized charge, the method of calculation, the date, and the name and address of the recipient (5 CCR 71920(b)(10)).
• “Copies of any official advisory notices or warnings regarding the student’s progress” (5 CCR 71920(b)(11)).
• “Complaints received from the student” (5 CCR 71920(b)(12)).

Aegis structures every student file around this 71920(b) checklist, so a missing item surfaces before an inspector finds it.

What the transcript itself must show

The transcript required by 5 CCR 71920(b)(5) is more than a list of grades. It must show:

• the courses or educational programs completed or attempted, with the dates of completion or withdrawal (5 CCR 71920(b)(5)(A));
• credit awarded for prior experiential learning, including the course title and the amount of credit (5 CCR 71920(b)(5)(B));
• transfer credit and credit by examination (5 CCR 71920(b)(5)(C) and (D)); and
• the institution’s name, address, website, and telephone number (5 CCR 71920(b)(5)(E)).

Where the records have to live

Required records must be maintained in California (5 CCR 71930(a)). Files held only at an out of state office do not satisfy the rule.

Institutional records have their own statute. CEC 94900.5 requires the institution to maintain, “for a period of not less than five years, at its principal place of business in this state,” complete and accurate records of the educational programs offered and the curriculum for each, the names and addresses of faculty members and records of each member’s educational qualifications, and any other records required by the chapter, including the student outcome records under Article 16. Unlike the student file rule, the statute does not state what starts the five year period, so the cautious practice is to keep these records at least five years past their last use.

The three year current rule and electronic storage

5 CCR 71930(c) does two jobs. It defines currency - “a record is considered current for three years following a student’s completion or withdrawal” - and it permits storage on “microfilm, microfiche, computer disk, or any other method of record storage,” which is what blesses scanned and cloud records. The permission comes with four conditions:

• the method must preserve all information with no loss of legibility for the entire required retention period (5 CCR 71930(c)(1));
• for current records, functioning devices that can “immediately reproduce exact, legible printed copies” must sit near the stored records at the primary administrative location in California; non-current records must be reproducible “within two (2) business days” (5 CCR 71930(c)(2));
• personnel who can operate and explain the equipment must be present during normal business hours (5 CCR 71930(c)(3)); and
• authorized inspectors must get immediate access, with copying reimbursement capped at “ten cents ($0.10) per page” (5 CCR 71930(c)(4)).

The practical translation: cloud storage is fine, but if your California administrative office cannot print an exact copy of a current student’s record on the spot, the storage method itself is the violation.

The second set rule

5 CCR 71930(d) requires “a second set of all academic and financial records required by the Act and this chapter at a different location” unless the originals are kept in a manner secure from damage or loss. The regulation names fire resistant cabinets as an acceptable example of secure storage. Paper originals in an ordinary filing cabinet, with no offsite duplicate, fail this test.

Immediate availability at inspection

All required records “shall be made immediately available by the institution for inspection and copying during normal business hours by the Bureau and any entity authorized to conduct investigations” (5 CCR 71930(e)). Immediately is the operative word: the only built in grace period anywhere in the section is the two business day reproduction window for non-current stored records under 71930(c)(2). Current files must come out on the spot.

What happens when a school closes

Retention duties survive closure. Under 5 CCR 71930(f), if an institution closes, “the institution and its owners are jointly and severally responsible to arrange at their expense for the storage and safekeeping in California of all records required to be maintained by the Act and this chapter for as long as those records must be maintained,” and the repository must make them immediately available. Joint and several responsibility means the Bureau can look to any owner individually for the whole obligation, and because transcripts are permanent records, the arrangement for them has no end date.

Enforcement exposure

Records violations are fined under the Bureau’s general citation authority. CEC 94936(b)(2) authorizes a fine of up to $5000 per violation, weighing the nature and seriousness of the violation, its persistence, the institution’s good faith and history, the purposes of the law, and the potential harm. 5 CCR 75030 sorts violations into four classes: class A ($2501 to $5000), class B ($1001 to $2500), class C ($501 to $1000), and class D ($50 to $500). No section specific fine schedule exists for records violations, so classification is discretionary. And because the statute authorizes a fine for each violation, a single pulled file missing several required items can stack into several separately fined violations.

Common questions

This guide is general information about California law, not legal advice. Regulations change; verify current requirements with the Bureau or counsel.