CORRECT. That is a violation of the privacy rule because it is inappropriate for students to have access to other students’ information. 

GENERAL RULE: You cannot leave personally identifiable material in a public place.