Data Protection: There are some principles of managing personal information. It needs to be fairly and lawfully processed, used only for the purpose it was collected, must be adequate, relevant, not excessive, accurate, up-to-date, kept secure and only
for the time it is needed, processed in line with individual's rights and not transferred out of EU without adequate security.1
Disclosure of information: In terms of disclosure of information the protocols and policies should be followed. The gathered information, pictures, any kind of data, should not be passed on to anyone without permission and the only information that can be passed on should be defined in the school policy. Only some information such as child's special needs or specific health conditions may need to be shared with school staff or other children to ensure child's safety.