Sorry, your answer is INCORRECT.
That is a flagrant violation of the privacy rule because it is inappropriate for students to have access to other students’ information.
General principle:
You cannot leave personally identifiable materials in a public place. This includes a computer directory where students might have access to other students’ records.