§ 1303.22 Disclosures with, and without, parental consent.

(a) Disclosure with parental consent. (1) Subject to the exceptions in paragraphs (b) and (c) of this section, the procedures to protect PII must require the program to obtain a parent's written consent before the program may disclose such PII from child records.

(2) The procedures to protect PII must require the program to ensure the parent's written consent specifies what child records may be disclosed, explains why the records will be disclosed, and identifies the party or class of parties to whom the records may be disclosed. The written consent must be signed and dated.

(3) “Signed and dated written consent” under this part may include a record and signature in electronic form that:

(i) Identifies and authenticates a particular person as the source of the electronic consent; and,

(ii) Indicates such person's approval of the information.

(4) The program must explain to the parent that the granting of consent is voluntary on the part of the parent and may be revoked at any time. If a parent revokes consent, that revocation is not retroactive and therefore it does not apply to an action that occurred before the consent was revoked.

(b) Disclosure without parental consent but with parental notice and opportunity to refuse. The procedures to protect PII must allow the program to disclose such PII from child records without parental consent if the program notifies the parent about the disclosure, provides the parent, upon the parent's request, a copy of the PII from child records to be disclosed in advance, and gives the parent an opportunity to challenge and refuse disclosure of the information in the records, before the program forwards the records to officials at a program, school, or school district in which the child seeks or intends to enroll or where the child is already enrolled so long as the disclosure is related to the child's enrollment or transfer.