Tennessee Code Title 49. Education § 49-7-216

(a) When the Tennessee Independent Colleges and Universities Association (TICUA) or any of its member institutions provide to the Tennessee higher education commission, another state agency, or a third party acting on behalf of the state, confidential student data or records concerning students enrolled in TICUA institutions, neither TICUA nor a member institution shall be held liable in any court of law for any breach of confidentiality of such information, if the breach resulted from actions of the commission, another state agency, a third party acting on behalf of the state, or their staff and not from the transmission of the data or records by TICUA or its member institutions before the data or records reached the commission.

(b) This section shall apply to any student data or records that are confidential under any law of this state or any federal law, including, but not limited to, the federal Family Educational Rights and Privacy Act (20 U.S.C. § 1232g).