Under the Individuals with Disabilities Education Act (IDEA) there are additional confidentiality and access protections.
This article includes a few examples of noncompliance, with which you might not be familiar, as well as your go-to regulations should you need them.