Data Protection Toolkit for Schools

As part of its engagement with the education sector through its complaint-handling and consultation functions, the DPC identified a number of areas, which schools, as a sector, appear to be finding challenging from a data protection compliance perspective, and decided to produce a data protection resource specifically tailored for schools. In 2023, the DPC consulted with a number of organisations in the education sector in order to gain a clearer picture of the specific concerns and challenges faced by schools. Taking this feedback into account, the DPC commenced work on its toolkit, which covers the following:

  • A detailed guidance piece on different aspects of data protection law in the specific context of schools
  • An FAQ section containing answers to questions commonly received by the DPC from the education sector
  • An appendix containing three helpful resources for schools, namely:
    • A sample template for Data Protection Impact Assessments (DPIAs)
    • An infographic on what information to include in a Privacy Policy
    • A “checklist” for schools on how to respond to a Subject Access Request (SAR)

 

The Data Protection Toolkit for Schools can be found here.

 

 

The DPC has also produced a variety of infographics based on the Data Protection Toolkit for Schools, which you can view or download by clicking on the images below:

TFS CCTV Policies and Safeguards
CCTV Policies and Safeguards

 

Core Principles of CCTV
Core Principles of CCTV in Schools

 

DPIAs
DPIAs: Protecting Student Data

 

Fair Processing of Personal Data
Fair Processing of Personal Data

 

Privacy Policy
Key Elements of a School Privacy Policy

 

Subject Access Requests in Schools
Subject Access Requests in Schools

 

Third-party Service Providers and GDPR Considerations
Third-party Service Providers and GDPR Considerations