Family Education Rights and Privacy Act of 1974 Section 438(4) B: Personal information shall only be transferred to a third party on the condition that such party will not permit any other party to have access to such information without the written consent of the student.