Are you a student? Your personal data is there for the asking
According to FERPA, directory information, “would not generally be considered harmful or an invasion of privacy if disclosed”. But Figueroa said colleges can pretty much decide what to include, which could mean a student photo, student ID and parents’ names, address, and where they were born, in addition to the list above.
Source: Are you a student? Your personal data is there for the asking – Naked Security