I’m not talking about a student portal that CSS maintains; I’m talking about a portal that a school might have. That being said, if CSS establishes and maintains a student portal that makes available to the student (and potentially by extension the custodial parent as well) the private and sensitive financial information of a non-custodial parent, that’s the same kind of failure that I’m referring to in the post that you quote above.