(i) An educational agency or institution or other party that releases de-identified data under paragraph (b) of this section does not disclose any information about how it generates and assigns a record code, or that would allow a recipient to identify a student based on a record code;