Serves colleges and universities, in the United States

20 U.S.C. 1232g(b); 34 CFR 99.31(a)(1)(i)(B), 99.33 · Read the law's page

• To receive personally identifiable information from a school's education records without the parent's or eligible student's consent as a school official, perform an institutional service or function for which the school would otherwise use employees, stay under the school's direct control with respect to the use and maintenance of the records, and accept the use and redisclosure limits of section 99.33(a) (34 CFR 99.31(a)(1)(i)(B)).
• Use personally identifiable information from education records only for the purposes for which the school disclosed it (34 CFR 99.33(a)(2)).
• Do not disclose personally identifiable information from education records to any other party without the prior consent of the parent or eligible student, unless an exception in 34 CFR 99.33(b) or (c) applies (34 CFR 99.33(a)(1)).
• Release education records or information from them without consent only after removing all personally identifiable information, on a reasonable determination that a student's identity is not personally identifiable, whether through single or multiple releases and taking into account other reasonably available information (34 CFR 99.31(b)(1)).