Oh, it's insane and I recoiled when she mentioned that.
But it is 100% happening.
People do amazingly stupid things with systems, especially when they don't have enough people with the expertise to set them up properly, so they just throw things in there without stopping to think about whether or not it's a good idea.
So, a particular school system decided to add SSN to the student profile? Or Canvas requires it?