Student and pupil data.
WHAT INSTITUTIONS HOLD
Identity and contact details Academic records Attendance Disciplinary records Health and special needs information Parent and guardian details Sometimes biometric and payment data
WHY IT DESERVES PARTICULAR CARE
Much of it concerns children, and some is sensitive.
WHAT TO ESTABLISH
The lawful basis for each category.
WHY CONSENT IS USUALLY WRONG
Attendance and academic records are not optional.
WHAT TO USE INSTEAD
Legal obligation, public task, or contract, as applicable.
WHAT TO BE CAREFUL WITH
Photographs of pupils Publishing results or lists Sharing with third-party platforms
WHAT PHOTOGRAPHS REQUIRE
A clear basis, and usually a choice for parents.
WHAT THIRD-PARTY PLATFORMS REQUIRE
A processor agreement Assessment of where data goes Attention to whether the provider uses data for its own purposes
WHY THAT LAST POINT MATTERS ACUTELY
Children's data used for profiling is a serious concern.
WHAT TO TELL PARENTS AND STUDENTS
What is held, why, and for how long.
WHAT RETENTION TO SET
Per category, with academic records typically longer.
WHAT TO DO WITH APPLICANT DATA
Delete unsuccessful applications after a defined period.
WHAT TO TRAIN STAFF ON
Handling records, and what may be shared.
WHAT TO DOCUMENT
Bases, retention and third parties.
