Student data privacy is a growing concern in the nation’s schools. Some districts are even starting to require vendors to sign data-security agreements as part of the purchasing process. But few have gone as far as the Metro Nashville Public Schools, which requires vendors that handle students’ personally identifiable data to carry cyber insurance.

The goal…