Crackers attack school computer systems to steal students' personal identification data, so as to use it for financial fraud.

How about if schools were not allowed to ask for such data from students? Indeed, why do they collect it nowadays? What do they use it for? Do they use it to give it to companies that should not get it either?