OAR 589-004-0600: Redisclosing Information

(1) Any party who receives student records containing personally identifiable information from a community college or colleges may disclose that information to a third party only if the student has been notified of the redisclosure and its purpose in the original disclosure notice and has consented, unless redisclosure falls under the exceptions described in OAR 589-004-0500. (2) Social security numbers disclosed to the Performance Reporting Information System must be encoded either by the originating college or by OCCURS, as required in ORS 657.734 . (3) Community colleges, OCCURS, or other parties may share and publish aggregate data which do not identify any individual student, without meeting the consent requirements of section (1) of this rule.