Education

Concerned about data protection?

The GDPR, like many organisations, imposes legal obligations on education and the ways in which they must manage and process personal data.

The legislation gives the Dutch Data Protection Authority (DPA) powers to impose significant financial sanctions and now includes data protection compliance in its inspection criteria, and there is an increased potential for reputational damage from bad publicity in education.

This page explains what the new legislation means for schools and the key points to consider. It is based on the experiences of The DPO Centre working with over 140 schools and universities.

You can also click on one of the options below to speak to us

What does the new data protection legislation mean for schools?

Like other organisations, all schools must:

  • Be transparent in the way they process personal data and are responsible for it
  • Appoint a data protection officer if the school is a public or private school that processes personal data on a large scale
  • Understand what data they have, where it is stored and who has access to it
  • Implement effective processes and procedures to protect personal data
  • Enabling students, staff, parents, guardians and suppliers to:
    • to have access to their personal data
    • to ensure it is correct and to change it if necessary
    • have it removed (unless there is a legal obligation to do so)
  • Being able to discover, manage, repair, prevent and report on data leaks. If necessary, contact should be made with the Dutch Data Protection Authority (AP).

School activities that use personal data

Schools must protect personal data in a wide range of areas. These include:

Communication and consent management

  • Taking photographs and showing photographs
  • Social media, posting images
  • Communication between school and parents

Lines

  • Privacy, retention and data protection policies
  • Staff guides

Administration

  • Network security
  • Email systems
  • Payroll, pension administration and other HR data of the staff
  • Paper files
  • Visitor list and access systems
  • Management of camera images

Management of sensitive information

  • Special educational needs
  • Medication and medical data
  • Protection and family matters

Teaching and getting the job done

  • Children's workbooks
  • Wall displays and nameplates
  • Tuition fee data
  • Take home reports and data
  • Printing facilities in schools

Share data with others

  • School trips
  • Teachers' availability
  • Primary schools and transition schools
  • References for employers and other institutions
  • Teachers who teach at multiple schools

Make a request below

Fill in your details below and we will contact you as soon as possible

Scroll to Top