Schools collect and receive personal and sensitive information on a daily basis. What are the legal requirements for managing and using this data?
Much of the personal and sensitive information collected by schools is, of course, essential to their day-to-day running.
This information can relate to students, parents and guardians, job applicants, staff members, volunteers and contractors, and others who come into contact with the school.
Following significant changes to the Privacy Act 1988 (Act), which took effect from 12 March 2014, schools need to consider how they use and manage such information, so as to avoid significant penalties.