Cornell had a student who suppressed their directory info through FERPA, which caused a single sign-on problem with a vendor. The vendor hadn't wanted to accept their limited attributes initially, but this is what let them renegotiate.
Seems like libraries could use FERPA initially to make the same argument?