Disclosing an individual student's information to third parties without express consent is a violation of FERPA laws.