“Public entities, including education organisations, are treasure troves of sensitive data,” Finan said. “They often store personal information (e.g., linked to voter registration), tax records and other sensitive information (e.g., handicap stickers in cars with linked health information).”