I remember when I first heard about this type of arrangement about 18 years ago. The Deputy Bank Commissioner was talking about it. At that time, it was not all that unusual, and was a fairly accepted practice.
Now, however, we're in a different environment because of all the emphasis on privacy. That means l) potential regulatory violations because there are now specific do's and don'ts; and 2) greater likelihood of customer suits relating to privacy.
If you allow the transaction you describe, you are implicitly, or perhaps even explicitly, revealing/confirming that the son has made a loan application to you. I would think that you would also be revealing the amount of the loan, since the father's guarantee would probably reflect the amount he is guaranteeing. Both of those bits of information would be NPI and it would take some creative work to fit the disclosure under one of the exceptions. I'm not saying it's impossible -- I can imagine arguing everything from it being necessary to effect a transaction initiated by the son, since you wouldn't make the loan without this arrangement, to a variety of similar arguments.
You simply have to look at what your risk is. What's the risk an examiner would find this to be a privacy violation? Could you convince the examiner an exception applies? What's the risk the customer might sue?