Colo. Rev. Stat. § 22-54-103.1
Notwithstanding any provision of this article 54, the department of education, the state charter school institute, and each school district and public school shall comply with all federal and state laws regarding the protection of student data, including the federal "Family Educational Rights and Privacy Act of 1974", 20 U.S.C. sec. 1232g, as amended, and all regulations and guidelines adopted pursuant to it, and the "Student Data Transparency and Security Act", article 16 of this title 22, and any rules promulgated pursuant to it. At a minimum, this includes redacting information as required to comply with federal and state laws regarding the protection of student data in published documents or reports regarding funding pursuant to this article 54.
C.R.S. § 22-54-103.1