I'm surprised they are paying for this. There's a Swedish company just requesting this from schools since it's public information so they have to provide it by law.
Here is the US privacy act for individuals: https://www.justice.gov/opcl/privacy-act-1974
It contrasts with FOIA and public records acts, of course, so there is a wealth of rabbit holes to go down on exactly where lines get drawn, but saying "no such rights" is simply inaccurate. If you work with public institutions you get pulled in both directions.