If a university receives any funding from the federal government, they are bound to federal regulations and also federal privacy laws.
An executive order is not a law. A university is not part of the executive branch.