If someone asks a university employee for information about a student on full privacy and doesn't immediately volunteer a password/passphrase to confirm their identity/ authorization, the employee must now tell the requester, "Due to data privacy policies, we are unable to respond to your request."