What responsibility does the Institute have to ensure that the student has actually signed consent to release personal information?
Generally, the Institute will assume the consent is valid. It should ask for a copy of the consent statement and identification of the person holding the consent, and should keep these on file with a notation of disclosure. If there is any reason to suspect that the consent my not be valid, the student should be contacted to confirm consent.