“Covered information” means the personally identifiable information of a pupil or any information that is linked to the personally identifiable information of a pupil which is:
1. Created by or provided to a school service provider by a pupil or the parent or legal guardian of a pupil through the use of a school service;
2. Created by or provided to a school service provider by an employee of a private school or the governing body of a private school; or
3. Gathered by a school service provider from any other source and associated with the identity of a pupil.