Schools are data controllers
If your school decides why and how learner data is processed, you are a data controller under the Data Protection Act, 2019, and normally need to register with the Office of the Data Protection Commissioner (ODPC).
Children’s data needs extra care
Processing a child’s data requires consent from a parent or guardian, or another lawful basis. Collect only what you need and tell families how it is used.
Keep it secure
Use role-based access, strong passwords and a reputable cloud provider. Know what to do if there is a breach, including notifying the ODPC within 72 hours where required.
Respect rights
Parents can ask what data you hold, ask for corrections, or object to certain uses. Have a simple process and a named contact.
Where to read the detail
ElimuDesk’s own commitments are on the data protection and privacy pages. Schools still decide why they collect each field and should get advice on their own registration.