I think FERPA is the law that impacts these situations. Very little information about a student can be released to anyone without the student's explicit written consent (I think).
I wonder what happens when FERPA limitations clash with FOIA claims. My guess, & I'm no lawyer, is that FERPA always wins, & ergo the information remains hidden. Though that part of law seems very gray and in a state of flux.