Data Protection Consent in the School Context: Issues to Plan For
The Irish and EU Data Protection legislation is designed to protect the privacy and personal data of any individual, regardless of age. Children are considered to be Data Subjects, equally protected by the legislation.
A key requirement is that any processing of their personal data would be fair, which is a very subjective criterion.
In this document, I hope to outline the basis for this requirement, as well as to provide some advice for schools and youth organisations who are regularly processing the personal data of those under-18 years of age – the generally accepted cut-off point which differentiates children from adults.
Throughout, I will try to offer pragmatic suggestions to enable schools and organisations to manage personal data in a compliant manner, while meeting their administrative objectives.
Further Recommended Reading
Data Protection for the Guidance Counsellor: Compliant Data Management by Hugh Jones should be read in conjunction with this article. It can be found here in the 'Policy and Practice Guidelines' section.