In my perspective,a university can release some basic information such as the name,school number.But it should set a limit,as for the ID card number ,address should not release without identifying the student and aiming.

It's important to do the confidential work.