Has anyone looked into this? Is it even legal? What are the privacy implications?
Your kid goes to a CA school, sure, but it's not a "California" school, it's a Sacramento school district or San Diego or LA or other locality's school district. Many other school districts don't have this requirement, or didn't when LA instituted theirs.