A university cannot hide behind federal privacy laws to refuse to honor an open-records request for information about the disciplinary sanctions levied for violations of student conduct codes, North Dakota's Attorney General has ruled.