The University and its contractors/vendors may not use a Social Security number or other non-directory information, either alone or in combination with other data elements, to identify student records when disclosing or confirming directory information without the written consent from the student.