be protected in a manner which will not permit the personal identification of students and their parents by other than those officials, and such personally identifiable data shall be destroyed when no longer needed for such audit, evaluation, and enforcement of Federal legal requirements.” 20 U.S.C. § 12S2g(b)(3); see ' also 34 C.F.R. § 99.35(a)(2)® (requiring the state or local educational authority or authorized agency to be responsible for “using reasonable methods to ensure to the greatest extent practicable” that any entity or individual designated as its authorized representative uses personal information only for purposes of evaluation or audit, “or for the enforcement of or compliance with federal legal requirements related to the programs”); 34 C.F.R. § 99.35(a)(2)(ii)-(iii) (<HOLDING>). The preamble to the Final Rule confirms that
recognizing relevance of information and that need for this information outweighs the burden to appellants holding state or local educational authority or authorized agency responsible for ensuring the protection of personal information and the destruction of the information when no longer needed holding that the plaintiff sufficiently pleaded a violation of the fcra based on extraneous information where it was alleged that the document included broad language regarding disclosure of the information the accuracy of the information the consequences of providing a false statement and the effect of a photocopy holding actual possession of or access to information by the irs is not an absolute bar to enforcement of a summons for that information holding that the right of access to government information or sources of information within the governments control is not mandated by the first or fourteenth amendments