FURPA - HIPA - Filter help -- ACL

[Some LDAP Admin <tjk@annapolislinux.org>]

I was wondering how people are setting up their LDAP directory
to include both viewable data and non-viewable data.

The FURPA Law which applies to all schools in the US requires this.

How would you do something like this with LDAP ?

For example let us say I have this entry for non browsable people.

dn: uid=someuser,ou=people,dc=somecoll,dc=edu
uid: someuser 
cn: some user
sn: someuser
o: Some College
mail: somecoll.edu
ou: Student-PRV

Additionally, I have this entry for browsable.

dn: uid=someuser,ou=people,dc=somecoll,dc=edu
uid: someuser 
cn: some user
sn: someuser
o: Some College
mail: somecoll.edu
ou: Student
ou: private 

Any idea on how to compose a filter on this ?