Colo. Rev. Stat. § 22-2-106.5
Notwithstanding the provisions of section 22-2-111(3)(a), the state board shall enter into a memorandum of understanding on or before September 1, 2006, with the Colorado commission on higher education to adopt a policy to share student data. At a minimum, the policy shall ensure that the exchange of information is conducted in conformance with the requirements of the federal "Family Educational Rights and Privacy Act of 1974", as amended, 20 U.S.C. sec. 1232g, and all federal regulations and applicable guidelines adopted in accordance therewith. The policy shall additionally require the state board, upon request, to share student data with qualified researchers. For purposes of this section, qualified researchers shall include, but need not be limited to, institutions of higher education, school districts, and public policy research and advocacy organizations.
C.R.S. § 22-2-106.5