In the hierarchy of information, most would agree that it’s more important to know whether someone is a rapist than whether someone is failing Chem 100. But administrators at Oklahoma State University apparently misunderstood the Federal Education Rights Privacy Act, which grants students some rights to privacy about their grades and other information. Nevertheless, in a moment of over-zealousness, the university decided not to go to the police multiple times to report alleged sexual assaults, because it—it says—it was worried about violating this privacy act.

Oklahoma State’s interpretation of the act was incorrect; the legislation allows administrations to call the campus police to investigate crimes. Whether the school genuinely misunderstood to act or used it as a shield to avoid reporting allegations of sexual assault remains unclear.

More: University Buried Rape Cases Because It Was Afraid of Revealing the Grades of Alleged Rapists?