(1) Each participating agency shall protect the confidentiality of personally identifiable information at the collection, storage, disclosure, and destruction stages.

(2) One official at each participating agency shall be designated as the individual responsible for assuring the confidentiality of any personally identifiable information.

(3) All persons collecting or using personally identifiable information shall receive training or instruction regarding the procedures on protection of the confidentiality of personally identifiable information contained in this chapter, state education law, the regulations implementing the Family Educational Rights and Privacy Act (34 C.F.R. Part 99), and the school district's procedures.

(4) Each participating agency shall maintain, for public inspection, a current listing of the names and positions of those employees within the agency who may have access to personally identifiable information.