Which of the Following Statements Describes a Provision of FERPA

Which of the following statements describes a provision of FERPA?

A) Organizations that provide educational services and receives funding from the department of education must have certain controls over student records, including disclosure to third parties.
B) Organizations that provide financial services must have certain controls over client records, including disclosure to third parties.
C) Individuals that receive TARP funds must protect the identities of the financial officers that brokered their benefits.
D) FISMA and FIDO must not collude to compromise, sell, or distribute information that reveals financial details about a citizen of the United States.