Protecting student privacy, or hiding key details from the public? How schools use or misuse a 50-year-old law you might not know about