Product: Credit reporting or other personal consumer reports

According to the laws Aidvantage/Department of Education , XXXX, XXXX, and XXXX violated not only the Fair Credit Reporting Act, but also the Privacy Act of 1974, the Family Educations Rights and Privacy Act, and my Opt out Laws. 

20 U.S. Code 1232g - Family educational and privacy rights ( b ) Release of education records ; parental consent requirement ; exceptions ; compliance with judicial orders and subpoenas ; audit and evaluation of federally-supported education programs ; recordkeeping- Privacy Act of 1974 5 U.S. Code 552a - Records maintained on individuals ( 4 ) the term record means any item, collection, or grouping of information about an individual that is maintained by an agency, including, but not limited to, his education, financial transactions, medical history, and criminal or employment history and that contains his name, or the identifying number, symbol, or other identifying particular assigned to the individual, such as a finger or voice print or a photograph ; ( b ) Conditions of Disclosure.No agency shall disclose any record which is contained in a system of records by any means of communication to any person, or to another agency, except pursuant to a written request by, or with the prior written consent of, the individual to whom the record pertains, unless disclosure of the record would be ( XXXX2 ) to a consumer reporting agency in accordance with section 3711 ( e ) of title 31 15 U.S. Code 1681 ( a ) ( b ) 15 U.S. Code 1681b ( 2 ) 15 U.S. Code 1681c 12 CFR 1022.3 15 U.S. Code 1681c-2 15 U.S. Code 1681e ( a ) ( b ) 15 U.S. Code 1681o ( 1 ) 15 U.S. Code 1681s-2 12 CFR Part 1016 - PART 1016PRIVACY OF CONSUMER FINANCIAL INFORMATION ( REGULATION P ) 1016.1 Purpose and scope. 
( a ) Purpose. This part governs the treatment of nonpublic personal information about consumers by the financial institutions listed in paragraph ( b ) of this section. This part : ( 1 ) Requires a financial institution to provide notice to customers about its privacy policies and practices ; ( 2 ) Describes the conditions under which a financial institution may disclose nonpublic personal information about consumers to nonaffiliated third parties ; and ( XXXX ) Provides a method for consumers to prevent a financial institution from disclosing that information to most nonaffiliated third parties by opting out of that disclosure, subject to the exceptions in 1016.13, 1016.14, and 1016.15.

1016.4 Initial privacy notice to consumers required.

( a ) Initial notice requirement. You must provide a clear and conspicuous notice that accurately reflects your privacy policies and practices to : ( 1 ) Customer. An individual who becomes your customer, not later than when you establish a customer relationship, except as provided in paragraph ( e ) of this section; and ( 2 ) Consumer. A consumer, before you disclose any nonpublic personal information about the consumer to any nonaffiliated third party, if you make such a disclosure other than as authorized by 1016.14 and 1016.15 of this part.

1016.7 Form of opt out notice to consumers ; opt out methods. 
( a ) ( 1 ) Form of opt out notice. If you are required to provide an opt out notice under 1016.10 ( a ), you must provide a clear and conspicuous notice to each of your consumers that accurately explains the right to opt out under that section. The notice must state : ( i ) That you disclose or reserve the right to disclose nonpublic personal information about your consumer to a nonaffiliated third party ; ( ii ) That the consumer has the right to opt out of that disclosure; and ( iii ) A reasonable means by which the consumer may exercise the opt out right.

( 2 ) Examples ( i ) Adequate opt out notice. You provide adequate notice that the consumer can opt out of the disclosure of nonpublic personal information to a nonaffiliated third party if you : ( A ) Identify all of the categories of nonpublic personal information that you disclose or reserve the right to disclose, and all of the categories of nonaffiliated third parties to which you disclose the information, as described in 1016.6 ( a ) ( 2 ) and ( 3 ) of this part, and state that the consumer can opt out of the disclosure of that information; and ( B ) Identify the financial products or services that the consumer obtains from you, either singly or jointly, to which the opt out direction would apply.

( ii ) Reasonable opt out means. You provide a reasonable means to exercise an opt out right if you : ( A ) Designate check-off boxes in a prominent position on the relevant forms with the opt out notice ; ( B ) Include a reply form together with the opt out notice that, in the case of financial institutions described in 1016.3 ( l ) ( 3 ) of this part, includes the address to which the form should be mailed ; ( C ) Provide an electronic means to opt out, such as a form that can be sent via electronic mail or a process at your Web site, if the consumer agrees to the electronic delivery of information ; or ( D ) Provide a toll-free telephone number that consumers may call to opt out.

( iii ) Unreasonable opt out means. You do not provide a reasonable means of opting out if : ( A ) The only means of opting out is for the consumer to write his or her own letter to exercise that opt out right; or ( B ) The only means of opting out as described in any notice subsequent to the initial notice is to use a check-off box that you provided with the initial notice but did not include with the subsequent notice. 
( g ) Time to comply with opt out. You must comply with a consumer 's opt out direction as soon as reasonably practicable after you receive it.

( h ) Continuing right to opt out. A consumer may exercise the right to opt out at any time.

( i ) Duration of consumer 's opt out direction.

( 1 ) A consumer 's direction to opt out under this section is effective until the consumer revokes it in writing or, if the consumer agrees, electronically.

15 U.S. Code ( g ) Time to comply with opt out. You must comply with a consumer 's opt out direction as soon as reasonably practicable after you receive it.

( h ) Continuing right to opt out. A consumer may exercise the right to opt out at any time.

( i ) Duration of consumer 's opt out direction.

( 1 ) A consumer 's direction to opt out under this section is effective until the consumer revokes it in writing or, if the consumer agrees, electronically.

15 U.S. Code ( g ) Time to comply with opt out. You must comply with a consumer 's opt out direction as soon as reasonably practicable after you receive it.

( h ) Continuing right to opt out. A consumer may exercise the right to opt out at any time.

( i ) Duration of consumer 's opt out direction.

( 1 ) A consumer 's direction to opt out under this section is effective until the consumer revokes it in writing or, if the consumer agrees, electronically.

15 U.S. Code 6802 Obligations with respect to disclosures of personal information 15.U.S. Code 6805 Enforcement