&gt;a legally enforceable document whereby companies promise to refrain from collecting, using, or sharing students’ personal information<p>&gt;This is not connected to any specific person<p>How can data not connected to any specific person be considered personal information? I mean what&#x27;s bad here, the fact they collect it and then scrap the personal information? Or the fear they probably don&#x27;t?