The same would be true for the corporate world and a school should be
> no different. If the IT department isn't doing their job in
> protecting the information about student's grades, then they need to > held accountable.
If it were medical records instead of school records, the IT department would be facing heavy fines for violation of federal law. They were just plain sloppy.
formatting link