(1) Except as provided by subsection (2) of this section, a school district employee or volunteer may not post, publish or otherwise make publicly available in a nonsecure setting any personally identifiable information in relation to the specific or comparative results of a performance-based assessment.
(2) A school district employee may post, publish or otherwise make publicly available in a nonsecure setting the information described in subsection (1) of this section if consent to post, publish or otherwise make publicly available the information as allowed by state and federal law is provided by:
(a) The student who took the assessment, if the student is 18 years of age or older; or
(b) The parent or guardian of the student who took the assessment, if the student is under 18 years of age.