(1) The college shall not permit access to or the release of education records or personally identifiable information contained therein without the written consent of the student to any party other than the following:

(a) College staff, faculty, and students when officially appointed to a faculty council or administrative committee, when the information is required for a legitimate educational interest within the performance of their responsibilities to the college with the understanding that the information will be used only in connection with that interest.

(b) Federal and state officials requiring access to education records in connection with the audit and evaluation of a federally or state-supported education program or in connection with the enforcement of the federal or state legal requirements which relate to such programs. In such cases the information required shall be protected by the federal or state official in a manner which will not permit the personal identification of students and their parents to other than those officials and such personally identifiable data shall be destroyed when no longer needed for such audit, evaluation, or enforcement of legal requirements.

(c) Agencies or individuals requesting information in connection with a student's application for, or receipt of, federal or state financial aid.

(d) Researchers conducting studies for or on behalf of the college for purposes of developing, validating, or administering predictive tests, administering student aid programs, and improving instruction if such studies are conducted in such a manner as will not permit the personal identification of students by persons other than representatives of such researchers, and such information will be destroyed when no longer needed for the purposes for which it was provided.

(e) Accrediting organizations in order to carry out their accrediting functions.

(f) Any person or entity designated by judicial order or lawfully issued subpoena, upon condition that the student is notified of all such orders or subpoenas in advance of the compliance therewith. Any college individual(s) or office(s) receiving a subpoena or judicial order for education records should immediately notify the assistant attorney general.

(2) Where the consent of a student is obtained for the release of education records, it shall be in writing, signed and dated by the person giving such consent, and shall include:

(a) A specification of the records to be released;

(b) The reasons for such release; and

(c) The names of the parties to whom such records will be released.

(3) In such cases where records are made available without student release as permitted by subsection (1)(b), (c), (d), (e), and (f) of this section, the college shall maintain a record kept with the education record release which will indicate the parties which have requested or obtained access to a student's records maintained by the college and which will indicate the legitimate interest of an investigating party. Releases in accordance with subsection (1)(a) of this section need not be recorded.

(4) Personally identifiable education records released to third parties, with or without student consent, shall be accompanied by a written statement indicating that the information cannot be subsequently released in a personally identifiable form to any other parties without obtaining consent of the student.