Privacy commissioners say school boards weren’t prepared for the scale of the PowerSchool data breach and are urging changes to their agreements with the technology company.