EDC § 99161

(a) No test agency shall release or disclose any test score identifiable with any individual test subject, in any form whatsoever, to any test score recipient, unless the agency is specifically authorized by the test subject to release that test score to the recipient. A test agency may, however, release all scores received by a test subject on a test to anyone designated by the test subject to receive the test score.

(b) A test agency may release test scores and other information in a form which does not identify any individual test subject for purposes of research, studies, and reports primarily concerning the test itself.