Data Protection in Schools would like to place a cookie on your computer to help us make this website better. To find out more about cookies and how we use them, please see our Privacy Policy.
Home
Principles And Lawful Basis
Processed lawfully, fairly and transparently
Collected for specified, explicit and legitimate purposes
Adequate, relevant and limited to what is necessary
Accurate, and where necessary, kept up to date
Processed in a manner that ensures appropriate security
Kept for no longer than is necessary
Accountability
Lawful Basis
Data Protection Guidelines
Data Protection and Schools
What is Data Protection?
Who is the data controller in schools/ETBs?
The Role of the Data Protection Commissioner
Do Schools/ETBs have to have a Data Protection Officer?
Data Protection Key Terms
Compliance Audit
Compliance Checklist
Compliance to Do List
Sensitive Personal Data
Collection and retention of Sensitive Personal Data
Sensitive Personal Data - Employees
Sensitive Personal Data – Students
Records Retention
Retention Records Schedule
Student Records Retention
What makes up a Student Record?
Student enrolment application forms
Student Attendance Records
Students transferring between schools
Transferring data in relation to students with special educational needs
Removal from the register
Child Protection Records
Employees Records
Employee Records Policy
Recruitment & Selection Process
Garda Vetting Outcomes/Disclosures
Payroll Records
Health & Safety Records
CCTV Records
School Tours information
Fundraising and Direct Marketing
Charitable Donations
Banking information (Direct Debit/Credit Card etc.)
Retention Periods for Credit/Debit Card Details
School Closure/Amalgamation
Boards of Management Minutes
Data Access Requests
Parental Access Requests
State Requests for information
Handling requests to rectify personal data
There is No Age of Consent for Access Requests
Requests for CCTV footage held
Data Subject Access Requests
Is a school/ETB obliged to seek proof of identity?
What should you do if a request is made under FOI?
Storage & Security
Data Security Guidance
Guidance on Laptops and other portable devices
Logs and Audit Trails
CCTV
Use of CCTV Systems in Schools
Covert Surveillance
What if a school is asked by a law enforcement authority for access to the recordings?
Guidelines on use of CCTV Footage
Taking & Using Images/Photos
What is considered good practice when schools/ETBs take photos of their students?
What is ‘informed consent’?
Images taken by pupils
Coursework Photos/Images
Other People Taking Photos of Children at School Events
Use of PPS numbers
Relevant Use of a PPS
Third Party Service Agreements
Legal Obligations
Content of the Service Agreement
Checklist
Schools & Direct Marketing
Consent
Contact in Case of Emergency
Information, Unsubscribing, & Penalties
School Websites
What should be in a Website Privacy Statement?
Cookies
Biometric Systems
Carrying out a Privacy Impact Assessment
Transferring Personal Data Abroad
What is an adequate level of data protection?
FAQs
GDPR
Resources
Acmhainní
Training
Past Events
What a school/ETB seeks by way of an expression of interest / application to enrol a student must be adequate, relevant and not excessive. See Rule 6 – Ensure that it is adequate, relevant and not excessive. Records relating to students who are admitted to the school should be placed on that student’s file. Records relating to applicants who were not admitted to the School should be securely destroyed in accordance with the School’s Record Retention Schedule.
The information sought on application forms should adhere to the eight data protection principles.