Same thing goes for academic or personal information about a student currently enrolled. That is a violation of federal law.
FYI, this law is referred to as the Family Educational Rights and Privacy Act of 1974 (FERPA). It should be referenced in every college catalog and at times faculty and staff are trained on FERPA. For those not familiar with this law, below are excerpts of a college catalog, but not Marshall's catalog.
The following is a list of the types of records that may be maintained by the College and/or the System Office for students:
* Academic records from schools previously attended
* Scores or results on various standardized tests and interest/attitude inventories
* Degrees awarded
* Current academic work completed
* Grades and other faculty evaluations
* Applications for admissions
* Applications and other data related to financial aid
* Applications for employment
* Class rosters
* Letters of recommendation
* Academic advisor notes
* Attendance data
* Biographical and identifying information (including name, social security number, sex, marital status, date of birth, residency and citizenship status, ethnic background, academic major, and military status)
* Medical data
* Current student status
* Accounts relating to charges
* Academic offenses
* Disciplinary offenses
* Counseling notes
The colleges are responsible for the maintenance of records in all categories although duplicates of some records are maintained in the Office of the Chancellor.
In its discretion, a college as appropriate may provide Directory Information in accordance with the provisions of the Act [Family Educational Rights and Privacy Act of 1974] to include: student name, address, email address, telephone number, date and place of birth, major field of study, dates of attendance, degrees and awards received, the most recent previous educational agency or institution attended by the student, participation in officially recognized activities and sports, and weight and height of members of athletic teams. Students may withhold Directory Information by notifying designated officials in writing within ten (10) calendar days from the first scheduled day of class of the fall term. All written requests for non-disclosure will be honored by the college for one (1) academic year. Requests to withhold Directory Information must be filed annually thereafter.