| CARVIEW |
Select Language
HTTP/1.1 200 OK
Date: Sun, 13 Jul 2025 07:40:25 GMT
Referrer-Policy: no-referrer
Cache-Control: must-revalidate, no-cache, private
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Drupal-Cache-Tags: block_view config:block.block.breadcrumbs config:block.block.mainpagecontent config:block.block.organisations config:block.block.pagetitle config:block.block.sidebarmenu config:block.block.sitemenu config:block.block.tabs config:block.block.userlogin config:block.block.views_block__news_3_block_1 config:block.block.yourdata config:block_list config:easy_breadcrumb.settings config:filter.format.full_html config:system.menu.individuals config:system.menu.organisations config:system.menu.site-menu config:system.site config:user.role.anonymous http_response local_task node:113 node:116 node:137 node:307 node:396 node:466 node:488 node:55 node:634 node:639 node:640 node:641 node:65 node:66 node:81 node:903 node_view rendered user:634
X-Drupal-Cache-Contexts: cookies:big_pipe_nojs languages route session.exists theme timezone url.path url.query_args url.site user.node_grants:view user.permissions user.roles:anonymous user.roles:authenticated
X-Drupal-Cache-Max-Age: -1 (Permanent)
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Content-Security-Policy-Report-Only: report-uri /report-csp-violation
X-XSS-Protection: 1
X-Drupal-Cache: HIT
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
Set-Cookie: BIGipServerpool-DPC-WEB=1711283978.20480.0000; path=/; Httponly; Secure
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS01ce883f=017199450ed7c91357e095eb6b40c7471f47ca34108f15de6f98bb4273669c4f5e436f9c8c8b5a7d23c8b171e4f8d4f4290b7b88cad19ebc7022ca003aca1a280a905468aa; Path=/; Domain=.dataprotection.ie
Transfer-Encoding: chunked
Data Protection Toolkit for Schools | Data Protection Commission
Data Protection Toolkit for Schools
As part of its engagement with the education sector through its complaint-handling and consultation functions, the DPC identified a number of areas, which schools, as a sector, appear to be finding challenging from a data protection compliance perspective, and decided to produce a data protection resource specifically tailored for schools. In 2023, the DPC consulted with a number of organisations in the education sector in order to gain a clearer picture of the specific concerns and challenges faced by schools. Taking this feedback into account, the DPC commenced work on its toolkit, which covers the following:
- A detailed guidance piece on different aspects of data protection law in the specific context of schools
- An FAQ section containing answers to questions commonly received by the DPC from the education sector
- An appendix containing three helpful resources for schools, namely:
- A sample template for Data Protection Impact Assessments (DPIAs)
- An infographic on what information to include in a Privacy Policy
- A “checklist” for schools on how to respond to a Subject Access Request (SAR)