Ed. Code, § 76240

(a) (1) Community college districts shall adopt a policy identifying those categories of directory information, as defined under Section 1232g of Title 20 of the United States Code as it exists on January 1, 2006, that may be released. The names and addresses of students may be provided to a private school or college operating under Sections 8080 to 8093, inclusive, Sections 33190 and 33191, or Sections 94000 to 94409, inclusive, or its authorized representative. However, no private school or college shall use this information for other than purposes directly related to the academic or professional goals of the institution.

(2) Any violation of this subdivision is a misdemeanor, punishable by a fine not to exceed two thousand five hundred dollars ($2,500), and, in addition, the privilege of the school or college to receive this information shall be suspended for a period of two years from the time of discovery of the misuse of the information.

(b) Any community college district may limit or deny the release of specific categories of directory information based upon a determination of the best interests of students.

(c) Directory information may be released according to local policy as to any former student or any student currently attending the community college. However, public notice shall be given at least annually of the categories of information that the district plans to release and of the recipients. No directory information shall be released regarding any student or former student when the student or former student has notified the institution that the information shall not be released.