FERPA permits the disclosure of personally identifiable information (PII) from students’ educational records, without consent of the student, if the disclosure meets certain conditions found in FERPA regulations (99.31, 99.35, 99.37, and 99.39). Disclosures of PII from the education records without obtaining prior written consent of the student may be made to:
- School officials whom the school has determined to have legitimate educational interests. This includes contractors, consultants, volunteers, or other parties to whom the school has outsourced institutional services or functions.
- To officials of another school where the students seeks or intends to enroll, or where the student is already enrolled, if the disclosure is for the purposes related to the student’s enrollment or transfer.
- In connection with Statewide Longitudinal Data Systems, State Authorities may collect, compile, permanent retain, and share without consent PII from educational records, and they may track participation in education and other programs by linking such PII to other personal student information that they obtain from other Federal or State data sources, including workforce development, underemployment insurance, child welfare, juvenile justice, military service, and migrant student records systems.
- In connection with financial aid for which the student has applied or which the student has received, if the information is necessary to determine eligibility for the aid, amount of the aid, conditions of the aid, or enforce the terms and conditions of the aid.
- To accrediting organizations to carry out their accrediting functions.
- To comply with a judicial order or lawfully issued subpoena.
- To appropriate officials in connection with a health or safety emergency.
- Information designated by the school as directory information.
- To organizations conducting studies for or on behalf of the school, in order to: (a) develop, validate, or administer predictive tests; (b) administer student aid programs; or (c) improve instruction.
- To authorized representatives of the U.S. Comptroller General, U.S. Attorney General, U.S. Secretary of Education, or State and local educational authorities, such as the Idaho State Board of Education. Disclosures under this provision may have been made in connection with an audit or evaluation of Federal- or State-supported education programs, or for the enforcement of or compliance with Federal legal requirements related to those programs. These entities may make further disclosures of PII to outside entities that are designated by them as their authorized representatives to conduct any research, audit, evaluation, enforcement, or compliance activity on their behalf. Research may occur even if this institution objects to or did not request the research. Federal and State Authorities must obtain certain use-restriction and data security promises from the entities that they authorize to receive PII, but do no need to maintain direct control over such entities.
- The final results of the disciplinary proceedings with respect to an alleged crime or offense, regardless of the findings, to the victim.
- To the parents of a student regarding violation of any Federal, State, or local law or any rule or policy of the school, governing the use or possession of alcohol or a controlled substance if the school determines the student committed a disciplinary violation and the student is under the age of 21.
- The disclosure concerns sex offenders and other individuals required to register under section 17010 of the Violent Crime Control and Law Enforcement Act of 1994.