The Family Educational Rights and Privacy Act (FERPA) is a federal law that requires school districts, universities and other educational entities to maintain confidentiality with information concerning students enrolled in their schools and universities.
Information is not allowed to be released that could identify any students enrolled in the school. Information that could lead to the identification of a student that is enrolled in school cannot be released without the parent / guardian written authorization.
For more information regarding the law, please look up 20 US Code, the Family Educational Rights and Privacy Act. Below is the link to the law.