While things like FERPA broadly protect most student information in the US, it doesn't exist so that people don't feel bad about their test scores. It limits schools and their staff to using student data for legitimate academic purposes and prohibits other uses that could be bad. That data goes beyond just test scores and could be things related to the students health, social life, behavior, etc. This kind of data doesn't need to shared with anyone that doesn't need to know it.