The University of Kentucky cites FERPA, the Family Educational Rights and Privacy Act, as one of the main reasons it can’t release the documents. However, LoMonte argues that FERPA is meant to protect education records only, not sexual assault investigation records which would be considered criminal if the events occurred off campus.
Source: wiktionary