Does anyone here have experience with approaching their districts? I had a meeting last year with three assistant superintendents to discuss issues related to

Does anyone here have experience with approaching their districts? I had a meeting last year with three assistant superintendents to discuss issues related to student privacy. New York has a student privacy law (§2-d of EDC Title 1 Article 1) passed as part of the Common Core Reform Act that establishes a Parents' Bill of Rights for Data Privacy and Security, which must be completed 120 days after its effective date of 12/08/2016. Among other things, this document must list all third parties to which student PII is provided, for what purpose, and state that they take the proper precautions to protect student data. That date---04/07/2017---has since passed. Unfortunately, my district (and possibly the entire county, Erie) is far behind. We also discussed school devices---they're moving toward a device-per-child model---and we expressed to one-another our concerns. The EFF's resources were essential in my research and provided resources for the district as well. The EFF was kind enough to put me in touch with a lawyer practicing in NY with an interest in student privacy to provide pro bono counsel as I figure out the best way to move forward. I'm going to try my hardest to keep on good terms with the district; going the route of issuing FOIA requests and such is a last resort. Finding other concerned parents in my district is likely my next step. My oldest son is entering first grade this year, so this is a fairly urgent priority for me.