Collected for specified, explicit and legitimate purposes

To keep it only for one or more specified, explicit and lawful purposes and not further processed in a manner that is incompatible with those purposes: further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes.

Schools/ETBs must:

• Be clear about why they are keeping personal data and what they are doing with it
• Ensure that data subjects are clear about why the school/ETB is keeping their data and what they are doing with it
• Seek to ensure that the board of management, school management, ETB administrative staff, and all other staff implement the school/ETB Data Protection Policy
• Specify the categories of data and the specific purpose for their use in the school/ETB Data Protection Policy
• Be aware of the different sets of data which they keep and the specific purpose of each and this should be reflected in the school/ETB Data Protection Policy.
• Not do anything inappropriate or unlawful with the data

Schools as data controllers may only keep data for purpose that is specific, lawful and clearly stated. The data should only be processed in a manner compatible with those purposes.