Federal law protects student PII but not directory information. Names, home address, school address, email address, telephone number, date and place of birth, possibly even height and weight and medical records. Student directory information is being shared without the knowledge or consent of the students unless they have the savvy to put a privacy hold on it, which as a practical reality is about as likely as people reading all the way through a privacy policy and terms of use statement before clicking agree to use an operating system.”]