Law / United States / 
Washington
Washington State University, student education records policy
In force since .
A sensitive categories rule binding government bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Consent, Prohibition, Governance
- Audit expectation
- none
What it requires
- This binds Washington State University, whose rule counts a person or company with whom the university has contracted as a school official with a legitimate educational interest (WAC 504-21-050(1)(a)).
- If you are Washington State University, do not permit access to or release of education records or personally identifiable information, other than directory information, without the written consent of the student, except to the parties WAC 504-21-050(1) lists.
- Maintain a record that indicates the parties that have requested or obtained access to a student's records in the listed cases and the legitimate interest of the requesting party (WAC 504-21-050(3)).
- Accompany personally identifiable education records released to third parties with a written statement that they cannot be released again in personally identifiable form without the student's consent, subject to the exceptions in WAC 504-21-050(4).
- Let a student ask that directory information not be released by filing a request online or with the office of payroll services (WAC 504-21-050(5)).
- Do not keep records that reflect a student's political or ideological beliefs or associations (WAC 504-21-060).
These lines are LexLint's reading of the law's text.
What record it asks for
What the log must hold
Access record
Logging duty
The university must keep a record of the parties that requested or obtained access to a student's records in the listed cases and the legitimate interest of the requesting party. The rule sets no retention period and names no audit.
- Kind
- Explicit
- As of
- Provision
- WAC 504-21-050(3)
- Trigger
- personal_data_processing
What this law does
WAC 504-21-050(1) bars the university from permitting access to or the release of education records or personally identifiable information, other than directory information, without the written consent of the student to any party other than those it lists. A school official under the rule includes a person or company with whom the university has contracted, such as an attorney, auditor or collection agent.
Where records are made available without student consent in the cases the rule lists, the university must maintain a record that indicates the parties that have requested or obtained access and the legitimate interest of the requesting party.
Personally identifiable education records released to third parties, with or without student consent, must be accompanied by a written statement that the information cannot be subsequently released in a personally identifiable form to any other parties without the consent of the student, with stated exceptions. Students may request that the university not release directory information by filing a request online or with the office of payroll services.
No records shall be kept that reflect a student's political or ideological beliefs or associations. The release rule in its present wording took effect on .
When LexLint raises it
When your app profile says your app serves colleges and universities.
Back to the example · Lint your app
Page updated .