(3) Unless otherwise provided by law or approved by the [State Board of Education/State Department of Education] shall not transfer student or redacted data deemed confidential under division (1) of subparagraph (c) of paragraph 2 of subsection A of this section to any federal, state or local agency or other organization, with the following exceptions: