. "Directory information, on the other hand, is a type of personally identifiable information not usually considered harmful if disclosed." . . .