I'm glad there was a "best practices" section as there are so many things to consider, with the last one being, "When in doubt, it is always advisable to err on the side of caution and to not release student educational records without first fully notifying the student about the disclosure.", although I would add checking with appropriate school officials as well.