What responsibility does the Institute have to ensure that the student has actually signed a consent to release personal information?
Generally, the Institute will assume the consent is valid. It should ask for a copy of the consent statement and identification of the person holding the consent, and should keep these on file with a notation of disclosure. If there is any reason to suspect that the consent may not be valid, the student should be contacted to confirm consent.