Inappropriate release of student information

Control

Documented Policies and Procedures (e.g., access, disclosure, retention, disposal, etc.)