The language of law is a little ambiguous when it comes to what education records are protected, which understandably can cause policy discrepancies from one school to the next. However, the law is very clear when it comes to "directory information." In fact, the US Department of Education has placed guidance on their website that outlines what is included in "directory information" and how it may be used.
Pursuant to 34 CFR § 99.31, "directory information" may be released without prior consent, unless the student notifies the institution otherwise. The law classifies “directory information” to include but not limited to:
Because FERPA permits institutions to release “directory information” without violating the law, GradImages can use school-provided address information to help distribute free, no-obligation commencement photography proofs to graduates and their families. Please note that school-provided addresses are a good secondary source of information. However, the most reliable, up-to-date addresses are those obtained by the graduates themselves at the event. (Click here to read why.)
Remember that GradImages does not sell or divulge any student information to a third party, unless it is required by law. Graduate information is used only to distribute proofs and special offers, and is protected at all times.