99.37—What conditions apply to disclosing directory information?
(a)
An educational agency or institution may disclose directory information if it has given public notice to parents of students in attendance and eligible students in attendance at the agency or institution of:
(1)
The types of personally identifiable information that the agency or institution has designated as directory information;
(2)
A parent's or eligible student's right to refuse to let the agency or institution designate any or all of those types of information about the student as directory information; and
(3)
The period of time within which a parent or eligible student has to notify the agency or institution in writing that he or she does not want any or all of those types of information about the student designated as directory information.
(b)
An educational agency or institution may disclose directory information about former students without complying with the notice and opt out conditions in paragraph (a) of this section. However, the agency or institution must continue to honor any valid request to opt out of the disclosure of directory information made while a student was in attendance unless the student rescinds the opt out request.
(c)
A parent or eligible student may not use the right under paragraph (a)(2) of this section to opt out of directory information disclosures to prevent an educational agency or institution from disclosing or requiring a student to disclose the student's name, identifier, or institutional e-mail address in a class in which the student is enrolled.
(d)
An educational agency or institution may not disclose or confirm directory information without meeting the written consent requirements in § 99.30 if a student's social security number or other non-directory information is used alone or combined with other data elements to identify or help identify the student or the student's records.