School using personal information unsafely

[cstooges3]

I attend a local university online. The school has just implemented an Acxiom identity Tool for authenticating users. The protocol is http: not https: which indicates the Blackboard site is not encrypted or secure. I am "required" to answer the questions, which ask for my specific current full name, address, phone number, as well as wife's full name, date of birth, previous exact addresses, and my date of birth, and other very personal information. I have informed the school that I feel this practice is unsafe and puts me at a risk for identity theft. I have asked them to stop using my personal information in this way, and have the tool ask questions that deal with my relationship with the college. They are refusing. Is there anything I can do legally to protect myself from Identity theft and get them to quit using this information in this way?