Granting access to student information, for what purpose, and to whom, is rarely a simple decision. Academic records have long been critical to the functioning of a university, but leveraging institutional data has become increasingly important (Lester, et al. 2017). Data stewards in higher education institutions nationwide confront a constellation of laws, regulations, and policies that differ across campuses and influence daily decisions to safeguard or release student data. Data stewards face complex decisions about whether to allow or prevent access to student data. This article examines a comparative case study focused on how student data stewards make decisions about disclosing student information. It found they used consistent criteria to assess requests for information.