Data Protection Toolkit for Schools
As part of its engagement with the education sector through its complaint-handling and consultation functions, the DPC identified a number of areas, which schools, as a sector, appear to be finding challenging from a data protection compliance perspective, and decided to produce a data protection resource specifically tailored for schools. In 2023, the DPC consulted with a number of organisations in the education sector in order to gain a clearer picture of the specific concerns and challenges faced by schools. Taking this feedback into account, the DPC commenced work on its toolkit, which covers the following:
- A detailed guidance piece on different aspects of data protection law in the specific context of schools
- An FAQ section containing answers to questions commonly received by the DPC from the education sector
- An appendix containing three helpful resources for schools, namely:
- A sample template for Data Protection Impact Assessments (DPIAs)
- An infographic on what information to include in a Privacy Policy
- A “checklist” for schools on how to respond to a Subject Access Request (SAR)