I am now told (by a reliable source) that an "open records" act request was made for the Colorado report, and that is why the university decided to release it "officially" (it was going to become public anyway, in other words).  It is not hard to imagine why, in a department with climate problems, there would be individuals (either inside or outside the department) keen to see such a report made public.  That may mean that, at least at state universities, even confidentiality agreements will be of no use most of the time.  Private universties are not subject to open record laws, however, and confidentiality agreements between the APA Committee and the university should contractually insure confidentiality.