Section D.2. provides further that ??? Researchers, education groups, and other parties who express legitimate education interests in using personally identifiable data shall submit a Data Request Form that explains what data are requested, and how the data are to be stored, used, maintained, disseminated, and ultimately destroyed.