May a school disclose de-identified data to community-based organization?

Yes. Schools do not need to obtain written consent or to inform parents or eligible students when releasing properly de-identified information.