There are many third party businesses and organizations that come into the schools and that may collect personal information about students. For years photography companies or insurance companies have operated in schools, and the data about students is provided, sometimes by parents, sometimes by teachers. Now those companies are covered by PIPEDA, even if the schools are not. School children are actively marketed to by many companies. Surveys, club memberships, product give aways are all used to gather personal information from kids and their families. That information may be used in ways that may be different than you expect. Your family information may be sold to marketers or entered into electronic databases and data mined.
The key is knowing who you are giving your data to - and why. Ask what is happening to your personal data.