N.C. Gen. Stat. § 115C-566.1
A nonpublic school that discloses personally identifiable information in student data or records according to the terms of a written agreement with a State agency, local school administrative unit, community college, or constituent institution of The University of North Carolina, in compliance with the Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g, shall not be liable for a breach of confidentiality, disclosure, use, retention, or destruction of the student data or records if the breach, disclosure, use, retention, or destruction results from actions or omissions of either (i) the State agency, local school administrative unit, community college, or constituent institution of The University of North Carolina to which the data was provided or (ii) persons provided access to the data or records by those entities.
N.C. Gen. Stat. § 115C-566.1