(a) Educational institutions shall not release personal information on a student except on the condition that the party to which the information is being transferred will not permit any other party to have access to the information without the written consent of the parents or of the eligible students.

(b) With any information released to a party under paragraph (a) of this section, educational institutions shall include a written statement which informs the party of the requirement in paragraph (a) of this section.