(1) The college shall maintain a record of requests for and disclosures of personally identifiable information in the education records of each student. The record maintained under this section shall be available for inspection and review as provided by law or rule.

(2) The college shall maintain the record with the education records of the student as long as the records are maintained.

(3) The record must include:

(a) The names of parties who have requested or received personally identifiable information;

(b) The interests the parties had in requesting or obtaining the information; and

(c) The names and interests of additional parties to which the receiving party may disclose or redisclose the information.

(4) The following parties may inspect the record of requests and disclosures relating to a student:

(a) The student;

(b) The college officials who are responsible for the custody of the records; and

(c) Persons authorized to audit the recordkeeping procedures of the college.

(5) The college is not required to maintain a record if the request was from, or the disclosure was to:

(a) The student;

(b) A school official;

(c) A party with written consent from the student; or

(d) A party seeking directory information.