Several US states have passed inadequate laws to protect the privacy of personal data of students in school.

These laws are inadequate because companies should not get any personal information about any students. Schools should keep these data, and delete anything that does not need to be kept.