34 CFR § 300.622 - Consent.
(a) Parental consent must be obtained before personally identifiable information is disclosed to parties, other than officials of participating agencies in accordance with paragraph (b)(1) of this section, unless the information is contained in education records, and the disclosure is authorized without parental consent under 34 CFR part 99.
(1) Except as provided in paragraphs (b)(2) and (b)(3) of this section, parental consent is not required before personally identifiable information is released to officials of participating agencies for purposes of meeting a requirement of this part.
(2) Parental consent, or the consent of an eligible child who has reached the age of majority under State law, must be obtained before personally identifiable information is released to officials of participating agencies providing or paying for transition services in accordance with § 300.321(b)(3).
(3) If a child is enrolled, or is going to enroll in a private school that is not located in the LEA of the parent's residence, parental consent must be obtained before any personally identifiable information about the child is released between officials in the LEA where the private school is located and officials in the LEA of the parent's residence.
The following state regulations pages link to this page.