May an educational agency or institution disclose personally identifiable information from students education records for the purpose of a specified audit, evaluation, or for compliance and enforcement purposes under FERPA?

FERPA permits schools to disclose PII from students’ education records, without consent, to authorized representatives of state and local educational authorities, the Secretary of Education, the Comptroller General of the United States, and the Attorney General of the United States for specified purposes.  Disclosures may be made under this exception as necessary in connection with the audit or evaluation off federal- or state-supported education programs, or in connection with the enforcement of federal legal requirements that relate to those programs. 34 CFR §§ 99.31(a)(3) and 99.35.