Allison,
Great points! In addition to student files and documents, consider any printouts including reports from student information systems, spreadsheets, etc. that are sometimes printed for reference. I have often seen schools that are meticulous about securing files forget to address such printouts laying around the campus on desks, in trash cans (vs. shredding bins) and other vulnerable places.
Traci Lee