The school or LEA has discretion under FERPA to decide what and how much PII from education records to disclose to community-based organizations (except in certain cases such as a court order or a subpoena). The school or LEA should determine which data elements are necessary for the activity in question and provide only those elements. Often LEAs and schools will discover that the organization can do the work in question without receiving PII from education records.
K-12 School Officials
Community Based Organizations