Skip to main content

Processing of personal data of children in school, leisure and recreation

Sharing personal data on social media by staff

The Data Protection Authority has directed preschools, elementary schools, leisure homes and sports clubs not to use Facebook or similar media as a communication medium for the sharing of personal data about children.

This is considered the processing of personal data.

However, the communication of information on the timing of events of schools and associations, their activities, for example fundraising projects and announcements thereof, is not considered to be processing personal data and therefore such media may be used to communicate that information. Generally, no comments will be made on the publication of images of open events by schools and associations, unless they show situations that may be of a sensitive nature.

The terms of Facebook, which users agree to, state that Facebook collects the information that is shared through the page. When personal data is shared with parents through a Facebook group, it is therefore shared simultaneously with Facebook. Facebook shares personal data with companies that are connected to Facebook, as well as with other parties (that is, third parties), under certain circumstances. Users of such social media do not have full control over the content that is posted there.

If it is considered necessary to share information about children electronically with schools, it is desirable to use a software that ensures full control of the personal data that are shared by the responsible parties (e.g. schools, leisure homes and others).

It must also be ensured that the information is not shared with unauthorised parties, that it is not processed for purposes other than the submitted ones, and that its security is adequately protected. It must also always be verified before processing begins that the authorization is in accordance to the Data Protection Act.

Social media usage of staff

It should be kept in mind that employees of schools and leisure activities are, like parents, role models for children and therefore it is important to educate children about social media, computer games and other technological solutions. Care should be taken to ensure that children are not seen on employees’ social media that may be used during their work, e.g. on pictures or in video clips.

Data Protection Authority

Contact us

postur@personuvernd.is

Telephone: (+354) 510 9600

Opening hours

Weekdays from 9 am to 12 pm and 1 pm to 3 pm

Telephone consultation on Thursdays from 9 am to 12 pm

Address

Laugavegur 166, 4th floor

105 Reykjavík, Ísland

Identification number: 560800-2820