Privacy of students.

The student file

The school keeps many data about students in the student file. For example, name and address, how the student develops, and information about extra support. The school follows privacy rules so student privacy is protected. It is especially important that:

• The school protects the data well. The data is not easily available to people who should not see it. This counts for both digital and paper files. They are kept locked or protected by a carefully chosen password. The school also pays enough attention to digital safety and the way teachers handle student data.
• The student file only has data that the school needs to give your child good education.
• You know which data the school records and who they share it with. Sometimes your permission is needed for sharing information.
• You have several rights: to see and take the file, to correct wrong information, and the right to have some information removed.

Photos and videos of your child

Many schools take photos and videos of their students. Not only for the annual school photo, but also of the musical, a sports day, or a job market. A photo or video of your child can be personal data. This is the case if your child is clearly visible. To publish these on the school website or facebook page, permission is needed. These points are important:

• The school tells you exactly what you give permission for. If you allow sharing images on a protected part of the school website, the school can only share there. For facebook or the public part of the website, a separate permission is needed.
• Permission must always be asked actively. The school cannot assume permission if you do not reply to an email.
• You can always withdraw your permission. If you gave it before, but want images removed, the school must do that.
• The school protects the images well.

Digital learning tools

When schools use digital learning tools in class, student data is shared between school and the providers of these tools. Such as login details and test results. The school must protect student privacy and make good agreements with providers. According to the GDPR, it is required to make a data processing agreement. This lists the agreements, for example about reporting data breaches or deleting data. The school prefers to use a code name. The provider then has only a number, not the student’s name. Only the school can link results to the student using that number.

School participation council

Parents take part in the policy about student privacy and data processing. The school participation council has the right to agree on the rules about use of personal data. If the school wants to set or change rules, the school participation council must give agreement.