California Code, Education Code - EDC § 49075

(a) A school district may permit access to pupil records to any person for whom a parent of the pupil has executed written consent specifying the records to be released and identifying the party or class of parties to whom the records may be released. The recipient must be notified that the transmission of the information to others without the written consent of the parent is prohibited. The consent notice shall be permanently kept with the record file.

(b) Notwithstanding subdivision (a), school lunch applications and information shared pursuant to Section 49557.2 shall be retained by any school district in the manner most useful to the administration of the school lunch program.