Consumer complaint received 2025-04-11 00:00:00
Product: Student loan — Federal student loan servicing
Issue: Dealing with your lender or servicer — Trouble with how payments are being handled
Company: Nelnet, Inc.
State: OR

Complaint narrative:
To Whom It May Concern, I am writing to report a significant and deeply concerning breach of my personal data related to my student loan records. It has come to my attention that my federally protected personal information was accessed by, shared with, or otherwise disclosed to XXXX XXXX or entities under his control, without my consent or knowledge.

This unauthorized access violates multiple federal laws and protections : The Privacy Act of 1974 ( 5 U.S.C. 552a ) This law prohibits federal agencies from disclosing personal information without written consent, except under specific, lawful exceptions. My student loan informationmaintained by the U.S. Department of Education or its servicersshould have been safeguarded under this law. Any unauthorized sharing of my data constitutes a direct violation.

The Family Educational Rights and Privacy Act ( FERPA ) ( 20 U.S.C. 1232g ) FERPA protects the privacy of student education records and prohibits disclosure without student consent, including financial aid and loan data when administered by educational institutions or federal programs. This breach appears to contravene FERPAs strict data handling policies.

The Federal Trade Commission Act ( 15 U.S.C. 4158 ) Under Section 5, the FTC prohibits unfair or deceptive acts or practices, including those involving misuse or unauthorized disclosure of consumer data. The disclosure of my private loan information without permission, especially to a non-governmental individual or company, may be an unfair practice and subject to FTC enforcement.

Department of Education Data Governance and Sharing Regulations Under federal student aid regulations, third-party access to loan data must be strictly controlled and logged. Unless expressly authorized or contractually bound to the Department of Education, no external entityespecially not a private corporate actor such as XXXX XXXXshould

be permitted access to my loan or personal records. This disclosure indicates a failure in oversight or a breach of the Departments regulatory framework.

Given the seriousness of these violations, I am requesting the following actions : A formal investigation into how my information was accessed, who authorized it, and for what purpose.

Immediate remedial action to secure and restrict further access to my personal data.

Written confirmation of how my rights were violated under the laws listed above.

Consideration of full loan cancellation or discharge, as restitution for the breach, loss of trust, and potential harm to my identity and financial wellbeing.

I have also submitted complaints to the Federal Student Aid Feedback Center, the Federal Trade Commission, and the Consumer Financial Protection Bureau. I reserve the right to pursue further legal or civil remedies should this matter not be addressed promptly and appropriately.

Please confirm receipt of this complaint and advise me of the steps your office will take in response. 

Sincerely, XXXX XXXX

Company response to consumer: Closed with explanation