34 CFR 379.43 - What are the special requirements pertaining to the protection, use, and release of personal information?
(a) All personal information about individuals served by any project under this part, including lists of names, addresses, photographs, and records of evaluation, must be held confidential.
(b) The use of information and records concerning individuals must be limited only to purposes directly connected with the project, including project evaluation activities.
(c) This information may not be disclosed, directly or indirectly, other than in the administration of the project, unless the consent of the agency providing the information and the individual to whom the information applies, or his or her representative, have been obtained in writing.
(d) The Secretary or other Federal or State officials responsible for enforcing legal requirements have access to this information without the written consent of the individual.
(e) The final product of the project may not reveal any personally identifying information without the written consent of the individual or his or her representative.