(b) Compliance requires policies and procedures to be adopted by districts that will regulate access to and release of student records. Requirements include:

1. (1) Notification to parents and the public of the kinds of data collected and that which is to be released as directory information.
2. (2) Directory information may include the student's name, address, telephone number, date and place of birth, major field of study, class, participation in officially recognized activities and sports, weight and height of members of athletic teams, dates of attendance, degrees and awards received, and the most recent previous educational agency or institution attended.
3. (3) Public notification of the procedures for gaining access to a student's record by a parent or guardian.

4. (4) Notice of prohibition of access or release of personally identifiable information (other than directory information) without written consent of the parent or eligible student (student becomes eligible to control own record access at age eighteen (18) or enrollment in post-secondary institution) to any except legally specified parties. Excepted parties are:

   1. (A) local school officials;
   2. (B) other schools where student may transfer;
   3. (C) specified U.S. and State officials when authorized by law;
   4. (D) financial aid officials to determine aid or legality;
   5. (E) local and State officials under previous mandate for data,
   6. (F) organizations doing studies on testing, student aid, and instruction improvement if personal identification is not further released;
   7. (G) accreditation organizations for limited accreditation purposes;
   8. (H) judge's order;
   9. (I) parents of tax dependent student (in case of divorce, separation); and
   10. (J) emergency personnel who need information to protect the health and safety of the student or other persons.
5. (5) Parents shall also be informed as to how they may request a hearing to halt the release of, challenge, or expunge any personally identifiable or directory information being collected by the school. Parental and student rights shall be explained and procedures defined in privacy policies of the district.