Colo. Rev. Stat. § 23-1-109.3
Notwithstanding the provisions of section 22-2-111(3)(a), C.R.S., the commission shall enter into a memorandum of understanding on or before September 1, 2006, with the state board of education to adopt a policy to share student data. At a minimum, the policy shall ensure that the exchange of information is conducted in conformance with the requirements of the federal "Family Educational Rights and Privacy Act of 1974", as amended, 20 U.S.C. sec. 1232g, and all federal regulations and applicable guidelines adopted in accordance therewith. The policy shall additionally require the department, upon request, to share student data with qualified researchers. For purposes of this section, qualified researchers shall include, but need not be limited to, institutions of higher education, school districts, and public policy research and advocacy organizations.
C.R.S. § 23-1-109.3