Sorry, your answer is INCORRECT.
FERPA recognizes students in post-secondary education as adults, regardless of age. Therefore, you cannot give out grades, student performance information, or any other non-directory information, without written consent.
General principle:
You must assume that the student is an adult who is entitled to privacy, even from parents.