The educational agency or institution must maintain the record of access with the education records of the student as long as the records are maintained.

For each request or disclosure, the record of access must include:

• The name of the party who requested or received personally identifiable information from the education records;

• The legitimate interests the party had in requesting or obtaining the information (the purpose for which the party is authorized to use the records);

• The date access was given; and

• If an educational agency or institution discloses personally identifiable information from an education record with the understanding authorized under REDISCLOSURE OF INFORMATION the record of access must include:

• The names of the additional parties to which the receiving party may disclose the information on behalf of the educational agency or institution; and

• The legitimate interests, as provided in WHEN CONSENT IS NOT REQUIRED TO DISCLOSE INFORMATION framework, which each of the additional parties has in requesting or obtaining the information.

The following parties requesting or obtaining access do not have to be entered on the record of access:

• The parent or eligible student;

• A school official whom the agency or institution has determined to have a legitimate educational interest;

• A party with written consent from the parent or eligible student;

• A party seeking directory information; or

• A party seeking or receiving the records as directed by a Federal grand jury or other law enforcement subpoena and the issuing court or other issuing agency has ordered that the existence or the contents of the subpoena or the information furnished in response to the subpoena not be disclosed.

• The parent or eligible student;

• The school official or his or her assistants who are responsible for the custody of the records; and

• For the purposes of auditing the recordkeeping procedures of the educational agency or institution:

• School officials, including teachers within the agency or institution whom the agency or institution has determined to have legitimate educational interests; and

• Authorized representatives of the Comptroller General of the United States, the Attorney General of the United States, the United States Secretary of Education, or State and local educational authorities.