This post started off as a comment in reply to Leonie Haimson, but it morphed into something more substantial so I made it a separate, new post.
I'm glad that we agree about the need to safeguard student privacy.
I see the issues related to privacy and data collection playing out against a backdrop where the rights of learners are systematically downplayed and ignored. If we limit our work to stopping data from being shared in a single instance - to a single entity, in one type of datastore - we've delayed the problem but we haven't solved it. Students are still exposed to the next collection effort that comes along, and they have no new rights.
If, however, we shift the frame to include and emphasize the rights of the learner to own their own data, we are having a different conversation that empowers learners over time, across systems, and - most importantly - doesn't...