Sadly, this is not a new thing. I saw something similar last year. My company received a privacy agreement from a school board. The majority of the document was completely reasonable and did a great job ensuring student data was protected up until the last clause in the agreement. It required that we, as a private company, could not boycott Israel. I had to do a double take. Here was a student records privacy agreement and they had bolted on a completely unrelated policy statement to it. It was amazing.