... ensuring consent as children mature
Might provide for some additional leverage when dealing with obstinate schools
The Article 29 Working Party, a committee of European countries' data protection officials, has said that when a child becomes mature enough to make their own decisions anyone processing their sensitive data must ensure they have the child's permission and not just that of the child's representative. 'Sensitive personal data' is defined in data protection legislation and includes information about someone's ethnic origin, religious beliefs, health and more.
The Working Party also advised that schools be particularly careful about collecting data on children, and said that children should be able to opt out of biometric access systems which are increasingly used in schools to control access to the school. It should be simple for children or their representatives to object and be issued with an access card instead, it said.