California is a national leader in data privacy. Yet state law has gaps that allow companies to collect and sell students’ ...