Parent groups and privacy advocates are challenging the practices of an industry built on data collection, and California has passed wide-ranging legislation protecting students’ personal information.