(1) The college may permit the access to or release of a student's education records or personally identifiable information contained therein without the written consent of the student to the following parties:

(a) College officials, including faculty members, when the information is required for a legitimate educational purpose within the scope of the recipient's official responsibilities with the college and will be used only in connection with the performance of those responsibilities;

(b) Federal or state officials requiring access to education records in connection with the audit or evaluation of federally or state-supported educational programs or in connection with the enforcement of federal or state legal requirements relating to such programs. In such cases, the information required shall be protected by the federal or state officials in a manner which shall not permit the personal identification of students or their parents to other than those officials, and such personally identifiable data shall be destroyed when no longer needed for the purposes for which was provided;

(c) Agencies or organizations requesting information in connection with a student's application for, or receipt of, financial aid;

(d) Organizations conducting studies for or on behalf of the university for purposes of developing, validating, or administering predictive tests, administering student aid programs, or improving instruction, if such studies are conducted in a manner which will not permit the personal identification of students by persons other than representatives of such organizations, and the information will be destroyed when no longer needed for the purposes for which it was provided.

(e) Accrediting organizations in order to carry out their accrediting functions;

(f) Any person or entity authorized by judicial order or lawfully issued subpoena to receive such records or information, upon condition that the student is notified of all such orders or subpoenas in advance of compliance therewith by the college. Any college employee or official receiving a subpoena or judicial order for education records or personally identifiable information contained therein shall immediately notify the assistant attorney general representing the college; or

(g) An alleged victim of any crime of violence (as defined in 18 U.S.C. §16), so long as the information disclosed is the result of a disciplinary proceeding for the crime conducted by the college against the alleged perpetrator.

(2) Education records of a student or personally identifiable information contained therein which are released to third parties, with or without the consent of the student involved, shall be conditioned upon a written agreement indicating that the information cannot subsequently be released in a personally identifiable form to any other party without the written consent of the student involved.

(3) The college shall maintain a record, kept with the education records of each student, indicating all parties, other than those parties specified in subsection (1)(a) of this section, which have requested or obtained access to the student's education records, and indicating the legitimate interest that each such party has in obtaining the records or information contained therein. This record of access shall be available only to the student, to the employees of the college responsible for maintaining the records, and to the parties identified under subsection (1)(a) and (c) of this section.