The Education Department is relying on a novel interpretation of privacy law to punish schools that hide student identity changes from parents.