Michigan Compiled Laws, Chapter 390. Universities and Colleges § 390.1579

Sec. 9. (1) To ensure the confidentiality of records containing personal data associated with identifiable individuals, a registered distance learning corporation shall use reasonable care to secure these records from unauthorized access and to collect only personal data that is necessary for the proper operation of the corporation.

(2) A registered distance learning corporation shall adopt appropriate practices and procedures concerning confidential information in compliance with applicable law.

(3) A registered distance learning corporation may enter into agreements with public and private persons to protect trade secrets, tests and test scores, proprietary information, and other information the disclosure of which would jeopardize the privacy or property rights of another person. Information subject to an agreement under this subsection in the possession of a public body is not subject to disclosure under the freedom of information act, 1976 PA 442, MCL 15.231 to 15.246.