Operational infrastructure for the annual notice — tooling that actually sends it on a calendar, not just a policy that says it should happen.

Technical capability for parents to opt out of non-essential data sharing — implemented in SIS, directory listing, and per-app permissions. Operational, not just documented.

Portal, document, or equivalent surface where parents can see what student data is collected, by whom, and for what purpose. Operational disclosure — not a policy artifact filed away.