A review of dozens of school policies by the Virginia Center for Investigative Journalism revealed incomplete or inconsistent rules for guarding student data, despite a 2015 state law enhancing protections. Many district policies appeared to be based on 50-year-old state guidelines originally intended to protect information about student health and report cards