Law / United States / 
Washington
The Evergreen State College, student education records
In force since .
A sensitive categories rule binding government bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Consent, Prohibition, Governance
- Audit expectation
- none
What it requires
- This binds The Evergreen State College; it reaches a collection agency under contract only as a listed recipient of records (WAC 174-280-030(1)(g)).
- If you are The Evergreen State College, do not permit access to or release of education records or personally identifiable information, other than directory information, without the written consent of the student, except to the parties WAC 174-280-030(1) lists.
- Before transferring a past due account to a collection agency under contract, send the student a notice at least ten days in advance of the transfer (WAC 174-280-030(1)(g)).
- Keep with the education record a record of the parties that requested or obtained access in the listed cases and their legitimate interest, and make it available to the student on request (WAC 174-280-030(3)).
- Accompany personally identifiable education records released to third parties with a written statement that they cannot be released again in personally identifiable form without the student's consent (WAC 174-280-030(4)).
- Release student information in computer files only through the individual or office that maintains the respective files (WAC 174-280-030(7)).
These lines are LexLint's reading of the law's text.
What record it asks for
Who may demand the log
Data subject
What the log must hold
Access record
Logging duty
The college must keep, with the education record, a record of the parties that requested or obtained access in the listed cases and their legitimate interest, available to the student on request. The rule sets no retention period and names no audit.
- Kind
- Explicit
- As of
- Provision
- WAC 174-280-030(3)
- Trigger
- personal_data_processing
What this law does
WAC 174-280-030(1) bars the college from permitting access to or the release of education records or personally identifiable information, other than directory information, without the written consent of the student to any party other than those it lists. The college may release records to a collection agency under contract to Evergreen when necessary to collect past due accounts, on the condition that the student is forwarded a notice at least ten days before the date the account is transferred.
Where records are made available without student release in the listed cases, the college must maintain a record, available to the student on request and kept with the education record, of the parties that have requested or obtained access and their legitimate interest.
Personally identifiable education records released to third parties, with or without student consent, must be accompanied by a written statement that the information cannot be subsequently released in a personally identifiable form to any other parties without the student's consent. Student information in computer files may be released only by the Evergreen individual or office that maintains the respective files. The release rule in its present wording took effect on .
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .