Under FERPA, students have the right to contact your school and tell them to delist your directory information or submit pseudonymous information instead.

However, data that is not considered PII isn't an issue, so even if you chose to anonymize yourself, they can still use Google Analytics to track your behaviors and remain compliant.

Raising awareness and trying to get policy changed? Civil disobedience? If you have even a small percentage of the student body you have more than enough to affect change.

Basically the same options citizens have, but at a much smaller scale, meaning individual contributions matter more.

Students are broke, so no lawsuit fuel.

Municipalities are insured for lawsuits, and have the power of taxation; they are an attractive target for many lawyers.