...
The University may disclose education records without a student’s prior written consent under the FERPA exception when the disclosure is to school officials with legitimate educational interests. A school official is a person employed by the University in an administrative, supervisory, academic, research, or support staff position (including law enforcement unit personnel, health staff, and student workers); a person serving on the Board of Trustees; or a student serving on an official committee, such as a disciplinary or grievance committee, or assisting another school official in performing his or her tasks. A school official also may include a volunteer or contractor outside of the University who performs an institutional service or function for which the school University would otherwise use its own employees and who is under the direct control of the University with respect to the use and maintenance of PII from education records, such as an attorney, auditor, or collection agent or a student volunteering to assist another school official in performing his or her tasks. A school official typically has a legitimate educational interest if the official needs to review an education record to fulfill the official’s professional responsibilities for the University.
...