Which statement is most accurate about consent for third-party disclosures in educational settings?

Which statement is most accurate about consent for third-party disclosures in educational settings?

• A. Only for de-identified information.
• B. Written consent is required before disclosures.
• C. Consent is never needed for third-party disclosures.
• D. Disclosures can be made without consent in educational contexts.

Answer: (B)

In educational settings, sharing a student’s identifiable records with someone outside the school is governed by privacy rules. The general rule is that written consent from a parent or eligible student is required before disclosing this information to a third party. The written authorization should specify who can receive the information, what exactly can be disclosed, and the purpose of the disclosure, giving the student control over their data. There are exceptions where a school may disclose without consent, such as to school officials with legitimate educational interests, to another school where the student is transferring, or in certain health or safety emergencies. But those are specific allowances, not the default. So, the statement that written consent is required before disclosures best captures the typical requirement, whereas the other options either overstate or understate the need for consent.

In educational settings, sharing a student’s identifiable records with someone outside the school is governed by privacy rules. The general rule is that written consent from a parent or eligible student is required before disclosing this information to a third party. The written authorization should specify who can receive the information, what exactly can be disclosed, and the purpose of the disclosure, giving the student control over their data.

There are exceptions where a school may disclose without consent, such as to school officials with legitimate educational interests, to another school where the student is transferring, or in certain health or safety emergencies. But those are specific allowances, not the default.

So, the statement that written consent is required before disclosures best captures the typical requirement, whereas the other options either overstate or understate the need for consent.