A school may not do either of the following:

1. (1) Sell, rent, lease, or trade covered information.

2. (2) Share, transfer, disclose, or provide access to a student's covered information to an entity or individual, other than the student's parent, school personnel, appointed or elected school board members or local school council members, or the State Board, without a written agreement, unless the disclosure or transfer is:

   1. (A) to the extent permitted by State or federal law, to law enforcement officials to protect the safety of users or others or the security or integrity of the operator's service;
   2. (B) required by court order or State or federal law; or

   3. (C) to ensure legal or regulatory compliance.

      This paragraph (2) does not apply to nonpublic schools.

(Source: P.A. 101-516, eff. 7-1-21.)