When a nonpublic institution of higher education provides the office student data or records pursuant to section 136A.05, subdivision 1 ; 136A.121 , subdivision 18; or 136A.1701, subdivision 11 , the institution of higher education is not liable for a breach of confidentiality, disclosure, use, retention, or destruction of the student data or records, if the breach, disclosure, use, retention, or destruction results from actions or omissions of:
(1) the office; or
(2) persons provided access to the data or records by the office.