California is considering a law to make schools protect personal data of students.

The proposal is well-meaning, but I think its provisions are inadequate because the US government will find some way to collect that personal data.

The law really should order schools not to release data about their students to any one except the student, or to another school that the student wishes to enroll in.