(1) The governing authority of any school other than a postsecondary school shall prohibit from further attendance any pupil allowed to attend conditionally who has failed to obtain the immunizations required by 20-5-403 (1) within time periods established by the department until that pupil has been immunized as required by the department or unless that pupil has been exempted under 20-5-405.
(2) The governing authority shall conform with the provisions of the Family Educational Rights and Privacy Act of 1974, 20 U.S.C. 1232g, as amended, and its implementing regulations at 34 CFR, part 99.
(3) A student's health records, including information related to immunizations received and immunization exemptions, are considered part of the student's education record and are protected from disclosure as provided in the Family Educational Rights and Privacy Act of 1974.